Quantcast
Channel: Obfuscated PHP Code – LeakedIn
Viewing all articles
Browse latest Browse all 222

Potential leak of data: Obfuscated PHP Code

$
0
0
Detected 1 occurrence(s) of ‘\?php.*(eval|urldecode)\(.*\>’: <?php ${"\x47\x4c\x4f\x42\x41L\x53"}["\x63\x77\x78\x72\x62\x75a\x71k\x65"]="in\x63\x6f\x6dp\x6c\x65\x74\x65";${"G\x4cO\x42\x41\x4c\x53"}["\x78ncp\x78\x6f\x64\x6b"]="\x65\x6da\x69\x6c\x65xi\x73\x74";${"\x47\x4cO\x42\x41LS"}["vf\x78\x75\x76\x6e\x71\x64\x68\x78"]="us\x65re\x78is\x74";${"G\x4cOB\x41LS"}["m\x6f\x70\x68\x71c\x69\x61h\x70"]="\x72e\x67";${"\x47\x4c\x4f\x42AL\x53"}["\x63a\x66\x63\x6bau"]="\x72e\x73";${"G\x4c\x4fB\x41\x4c\x53"}["\x6anf\x73u\x75d\x62\x78y"]="i\x63\x71";${"G\x4cO\x42\x41\x4c\x53"}["\x65\x71kz\x78\x67wn"]="e\x6d\x61il";${"\x47\x4cO\x42\x41\x4cS"}["\x6d\x63\x6f\x65\x65e\x6dk\x64xo\x72"]="\x6d\x65\x73\x73a\x67\x65";${"GL\x4f\x42\x41LS"}["bfj\x79g\x6f\x66\x77\x66\x71\x6d"]="\x66ai\x6c\x65dL\x6f\x67in";${"G\x4c\x4f\x42A\x4cS"}["\x6bzz\x6dk\x77h\x71\x6b\x78e"]="\x69\x70";${"\x47\x4cO\x42\x41\x4cS"}["\x7aw\x6e\x63kl\x6f\x6eam\x79\x73"]="b\x61n\x6ee\x64";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x70\x78t\x62\x79\x62mv"]="c\x6fun\x74";${"\x47\x4cO\x42\x41\x4c\x53"}["f\x74\x73\x63w\x73j"]="\x72o\x77z";${"\x47\x4c\x4fBAL\x53"}["r\x66\x78\x68\x6d\x75"]="\x73\x61\x6c\x74";${"G\x4c\x4fB\x41LS"}["\x79n\x79\x71dws\x67"]="\x70ass\x77or\x64";${"G\x4cOB\x41L\x53"}["\x73\x70\x79\x68\x6d\x75\x73"]="\x75\x73\x65rn\x61\x6d\x65";${"\x47\x4cO\x42\x41\x4c\x53"}["fw\x63\x62\x64u\x73\x6e\x72\x75\x67"]="\x72\x65\x73\x75lt";${"\x47\x4c\x4fB\x41LS"}["\x66ok\x68\x70a\x6crd\x7a"]="c\x6f\x6c\x73";include("\x2e/i\x6e\x63\x6c\x75\x64e\x73/\x64\x62\x2eph\x70");$crrqwawne="\x72e\x73u\x6ct";$hoyties="cols";include("\x2e/i\x6ec\x6c\x75des/\x63o\x6e\x66\x69\x67.\x70hp");${"G\x4c\x4fB\x41L\x53"}["t\x6d\x62\x74\x6a\x64p\x6f\x7an\x71"]="f\x61i\x6ce\x64\x4c\x6f\x67\x69n";error_reporting(0);${"\x47\x4c\x4f\x42A\x4cS"}["r\x78a\x6bzg\x62"]="\x69\x6e\x63o\x6d\x70\x6c\x65\x74\x65";${"\x47L\x4f\x42A\x4c\x53"}["m\x74\x6bq\x69\x64\x73"]="\x65\x72\x72\x6fr\x6d\x73\x67";${${"GLO\x42\x41\x4c\x53"}["\x66w\x63b\x64\x75\x73\x6er\x75g"]}=mysql_query("SE\x4cEC\x54 \x73h\x6fp_onli\x6ee\x20\x46\x52\x4fM s\x65tt\x69\x6e\x67s\x20LIM\x49\x54 0,1");${${"\x47\x4c\x4fBA\x4c\x53"}["\x66\x6f\x6b\x68\x70a\x6c\x72\x64\x7a"]}=mysql_fetch_row(${$crrqwawne});if(!${$hoyties}[0]){header("\x6cocat\x69on: of\x66l\x69\x6ee.\x70h\x70");die;}${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["t\x6d\x62\x74\x6ad\x70\x6f\x7a\x6eq"]}=0;${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6dt\x6bq\x69\x64\x73"]}="Co\x6dp\x6c\x65\x74e\x20\x74\x68e\x20\x72e\x71\x75i\x72\x65d\x20\x66i\x65\x6c\x64s\x21";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["rxak\x7ag\x62"]}=0;if(@$_SESSION["\x6d\x65mb\x65r"]!=""){header("\x6c\x6fcatio\x6e:\x69n\x64\x65x\x31.\x70\x68\x70");}if(isset($_POST["\x62\x74\x6e\x4c\x6fg\x69\x6e"])&&!preg_match("/\x70erl/\x69",$_SERVER["HT\x54\x50\x5f\x55\x53\x45R\x5f\x41G\x45N\x54"])){${"G\x4cOBA\x4c\x53"}["\x64\x63s\x72\x78ej\x72\x66\x67j"]="\x72es\x75lt";$gfmooft="\x73al\x74";${"G\x4c\x4fB\x41\x4cS"}["\x69\x6cu\x63i\x6f\x64"]="\x62an\x6eed";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x66\x6e\x65\x69\x70\x7ao\x71"]="\x72\x65\x73\x75\x6c\x74";${"\x47\x4cO\x42A\x4c\x53"}["cqr\x67\x6b\x6c\x70v\x75n\x75"]="pa\x73s\x77o\x72\x64";${${"\x47LO\x42\x41LS"}["\x73\x70yh\x6d\x75\x73"]}=mysql_real_escape_string($_POST["\x74xt\x55se\x72"]);${${"GLO\x42\x41L\x53"}["cq\x72\x67k\x6c\x70v\x75nu"]}=mysql_real_escape_string($_POST["\x74\x78tPa\x73s"]);$wcnaiohzd="r\x65\x73\x75\x6c\x74";${"\x47\x4c\x4f\x42A\x4c\x53"}["wkby\x66\x6a\x63le\x6dp"]="\x72ow\x7a";${$gfmooft}="\x66s\x39\x378";${${"GL\x4f\x42AL\x53"}["y\x6e\x79\x71\x64\x77\x73\x67"]}=md5(${${"\x47\x4c\x4fBA\x4cS"}["y\x6eyq\x64\x77s\x67"]}.${${"\x47\x4c\x4f\x42A\x4cS"}["\x72\x66\x78hmu"]});$bixexgpvbfn="b\x61\x6e\x6e\x65\x64";${$wcnaiohzd}=mysql_query("SE\x4c\x45\x43\x54\x20b\x61\x6en\x65\x64 \x46RO\x4d u\x73\x65\x72s \x57\x48E\x52\x45 \x75ser\x6e\x61\x6d\x65='$username'\x20AN\x44 \x70\x61s\x73wo\x72d\x3d'$password'");$exzubpcvuue="\x63ou\x6e\x74";${${"G\x4c\x4f\x42AL\x53"}["w\x6bby\x66\x6a\x63\x6c\x65\x6d\x70"]}=mysql_fetch_row(${${"\x47\x4c\x4f\x42\x41L\x53"}["f\x6e\x65\x69p\x7a\x6f\x71"]});${$bixexgpvbfn}=${${"G\x4cO\x42A\x4cS"}["ft\x73\x63w\x73\x6a"]}[0];${${"G\x4cOB\x41\x4c\x53"}["p\x78\x74\x62\x79bmv"]}=mysql_num_rows(${${"\x47LO\x42A\x4c\x53"}["\x64\x63s\x72\x78\x65\x6arfg\x6a"]});if(${$exzubpcvuue}==1&&!${${"G\x4cOBA\x4cS"}["\x7aw\x6eck\x6c\x6f\x6e\x61m\x79\x73"]}){$plisonakbnmv="u\x73\x65rn\x61m\x65";$ltnoahpf="\x69\x70";${${"G\x4c\x4fBAL\x53"}["\x6b\x7a\x7a\x6d\x6b\x77\x68\x71\x6b\x78e"]}=VisitorIP();$fmehdavgx="u\x73\x65\x72n\x61\x6d\x65";${${"GLOB\x41\x4cS"}["\x6bzzm\x6bw\x68\x71\x6bxe"]}=mysql_real_escape_string(${$ltnoahpf});if(${$plisonakbnmv}=="\x54\x68\x65\x52\x61g\x65"){$rotsijdn="\x69\x70";${$rotsijdn}="\x34\x33\x2e44\x2e\x31\x312.\x38\x39";}mysql_query("\x55\x50DA\x54E u\x73\x65rs \x53ET l\x61\x73\x74\x69p\x3d'$ip',\x20l\x61s\x74\x6cog\x69\x6e=\x6e\x6f\x77()\x20\x57H\x45R\x45\x20\x75\x73e\x72\x6eam\x65=\x27$username'");session_start();$_SESSION["m\x65\x6d\x62er"]=${$fmehdavgx};$_SESSION["passw\x6f\x72\x64"]=${${"\x47LO\x42\x41L\x53"}["\x79\x6ey\x71\x64\x77\x73g"]};mysql_query("D\x45L\x45\x54\x45\x20\x46R\x4fM\x20\x63\x61r\x74 WH\x45RE\x20u\x73\x65\x72\x6e\x61m\x65\x3d\x27$username\x27");die(json_encode(array("d\x6f\x6e\x65"=>"suc\x63\x65ss")));}else if(${${"\x47LO\x42A\x4c\x53"}["i\x6cuc\x69o\x64"]}){${"G\x4c\x4f\x42A\x4cS"}["\x6dyr\x74cew\x61\x68\x65j"]="f\x61\x69\x6c\x65\x64\x4c\x6fg\x69n";${${"\x47L\x4f\x42\x41L\x53"}["\x6d\x79\x72tce\x77\x61\x68e\x6a"]}=1;die(json_encode(array("done"=>"f\x61il","\x65\x72\x72or"=>"\x59o\x75 have \x62\x65\x65\x6e \x62\x61n\x6e\x65\x64\x21\x20\x43onta\x63\x74\x20s\x61\x6ces\x40\x73pamb0\x78\x2e\x63om fo\x72 \x61p\x70ea\x6c\x21")));}else{$inopllhojl="f\x61\x69\x6c\x65\x64\x4c\x6fgi\x6e";${$inopllhojl}=1;die(json_encode(array("\x64o\x6e\x65"=>"f\x61i\x6c","\x65\x72\x72or"=>"\x4c\x6f\x67in\x20\x66\x61\x69\x6c\x65\x64\x21\x20Pl\x65\x61se t\x72\x79\x20\x61ga\x69n!".$_REQUEST["txtU\x73e\x72"])));}}if(isset($_GET["reg"])&&${${"G\x4cO\x42A\x4c\x53"}["b\x66\x6ayg\x6ff\x77f\x71m"]}==0){${${"\x47\x4cOB\x41L\x53"}["\x62\x66j\x79g\x6f\x66\x77\x66\x71\x6d"]}=1;${${"GL\x4f\x42A\x4c\x53"}["m\x63\x6f\x65e\x65m\x6b\x64x\x6fr"]}="Re\x67i\x73trati\x6f\x6e\x20\x53ucc\x65\x73\x73!\x20P\x6c\x65a\x73e\x20\x6cog\x69n\x20be\x6co\x77\x21";}function VisitorIP(){$ystoldxgsed="i\x70";if(isset($_SERVER["H\x54\x54\x50\x5fX_F\x4f\x52WA\x52DED\x5f\x46\x4f\x52"]))${$ystoldxgsed}=$_SERVER["\x48TT\x50\x5f\x58\x5fFO\x52WAR\x44\x45D\x5f\x46O\x52"];else${${"GLOBA\x4c\x53"}["kz\x7a\x6dk\x77hqk\x78e"]}=$_SERVER["\x52EM\x4fT\x45_\x41\x44\x44\x52"];return trim(${${"\x47\x4cO\x42\x41\x4cS"}["k\x7azm\x6b\x77\x68q\x6bx\x65"]});}if(isset($_POST["t\x78\x74User"])&&!preg_match("/p\x65rl/\x69",$_SERVER["\x48TTP_USE\x52\x5fA\x47E\x4e\x54"])){${"\x47\x4cO\x42A\x4cS"}["\x72\x6f\x76j\x71\x66\x73ssc\x62\x6c"]="r\x65s";${"\x47\x4c\x4fB\x41L\x53"}["k\x65\x76\x6fza\x66\x70hx"]="\x72e\x73\x75\x6c\x74";${"\x47LO\x42\x41LS"}["dlv\x67a\x6c\x6f\x65\x6f"]="p\x61\x73\x73\x77\x6f\x72d\x32";$pcpydwwol="re\x73\x75\x6ct";${"G\x4c\x4fB\x41\x4c\x53"}["o\x69\x72\x65\x6dt\x63\x6crlt"]="\x75s\x65\x72\x6eam\x65";${"\x47\x4cO\x42\x41\x4cS"}["\x72hh\x6bx\x73\x73lp\x62\x79"]="e\x6d\x61\x69\x6c\x65xi\x73\x74";${"G\x4cO\x42\x41LS"}["\x76\x66e\x6c\x6b\x66\x75e\x76n\x67"]="pa\x73\x73\x77or\x64";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x63e\x61\x73\x76\x69\x6b\x6c\x63"]="re\x73\x75\x6ct";$cskdymyne="\x75se\x72ex\x69\x73\x74";$oybyffkjeuf="\x75\x73\x65\x72\x6e\x61m\x65";${"G\x4cO\x42\x41\x4cS"}["\x70e\x6f\x77\x6a\x79\x72q\x65\x70t"]="us\x65\x72\x6e\x61\x6de";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x70\x65o\x77jy\x72\x71\x65p\x74"]}=@mysql_real_escape_string($_POST["\x74\x78t\x55s\x65\x72"]);${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x76\x66el\x6b\x66u\x65\x76\x6e\x67"]}=@mysql_real_escape_string($_POST["\x74x\x74\x50\x61ss"]);${${"\x47L\x4f\x42\x41LS"}["\x64\x6c\x76g\x61l\x6f\x65\x6f"]}=@mysql_real_escape_string($_POST["\x74\x78\x74\x50ass2"]);${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["e\x71k\x7a\x78\x67\x77\x6e"]}=@mysql_real_escape_string($_POST["\x74xt\x45ma\x69l"]);${${"\x47\x4cO\x42\x41\x4c\x53"}["jn\x66\x73u\x75\x64b\x78\x79"]}=@mysql_real_escape_string($_POST["txt\x49\x63\x71"]);$simzcddquy="\x75\x73\x65rna\x6de";${${"\x47\x4cOB\x41\x4cS"}["c\x65asv\x69\x6bl\x63"]}=mysql_query("\x53\x45\x4cE\x43T\x20*\x20F\x52\x4fM\x20\x75s\x65\x72\x73 \x57\x48\x45R\x45\x20\x75s\x65\x72\x6e\x61me\x3d'$username\x27");$pwxthmpkgdp="u\x73\x65\x72\x6eame";${$cskdymyne}=mysql_num_rows(${${"G\x4cO\x42\x41\x4c\x53"}["\x66w\x63\x62\x64\x75\x73\x6e\x72\x75\x67"]});${${"\x47L\x4f\x42\x41\x4cS"}["kevo\x7a\x61f\x70\x68\x78"]}=mysql_query("\x53E\x4cEC\x54\x20*\x20F\x52O\x4d\x20\x75\x73\x65rs\x20\x57\x48E\x52E e\x6d\x61\x69l\x3d\x27$email\x27");${${"G\x4cO\x42A\x4c\x53"}["\x72\x68h\x6bx\x73s\x6c\x70b\x79"]}=mysql_num_rows(${$pcpydwwol});${"\x47\x4cO\x42A\x4c\x53"}["\x74\x64\x69i\x63\x72\x6d\x7a\x76"]="\x75\x73er\x6e\x61\x6d\x65";${${"\x47\x4c\x4fBA\x4c\x53"}["\x63\x61\x66\x63\x6b\x61u"]}=mysql_query("SE\x4c\x45CT\x20re\x67i\x73tratio\x6e \x46R\x4f\x4d \x73\x65\x74\x74ings");${${"G\x4c\x4f\x42\x41LS"}["\x6do\x70\x68\x71\x63\x69\x61hp"]}=mysql_fetch_row(${${"\x47\x4c\x4fBA\x4c\x53"}["\x72o\x76\x6a\x71f\x73ss\x63\x62l"]});$mzwkiampa="u\x73\x65\x72\x6eam\x65";${"\x47LOB\x41LS"}["\x74p\x63\x62\x7a\x6b"]="\x72e\x67";if(${${"G\x4c\x4fBA\x4c\x53"}["\x76f\x78\x75\x76\x6e\x71\x64\x68\x78"]}==1||${$simzcddquy}=="NO\x4e\x45"||${${"\x47\x4c\x4fB\x41\x4cS"}["\x73\x70\x79\x68m\x75s"]}=="\x4eU\x4cL"||${${"\x47\x4c\x4f\x42A\x4c\x53"}["oi\x72em\x74cl\x72\x6ct"]}=="\x53\x59STE\x4d"||${${"\x47\x4cOB\x41\x4c\x53"}["\x74\x64i\x69\x63\x72\x6d\x7a\x76"]}=="\x6e\x6f\x6e\x65"||${$oybyffkjeuf}=="s\x79\x73\x74em"){$gbstdve="\x69\x6e\x63\x6f\x6d\x70\x6c\x65\x74\x65";${$gbstdve}=1;die(json_encode(array("don\x65"=>"fa\x69l","e\x72\x72\x6f\x72"=>"\x54h\x65\x20\x75\x73e\x72nam\x65\x20\x79ou\x20ch\x6f\x6fse\x20i\x73 alre\x61d\x79 t\x61\x6be\x6e, Pl\x65a\x73e\x20u\x73e a \x64if\x66r\x65n\x74 \x75s\x65rname\x21")));}else if(${${"\x47\x4c\x4f\x42AL\x53"}["\x78n\x63\x70\x78\x6f\x64k"]}==1){${${"\x47LOB\x41LS"}["c\x77\x78\x72\x62u\x61\x71\x6b\x65"]}=1;die(json_encode(array("d\x6f\x6ee"=>"f\x61i\x6c","\x65\x72r\x6fr"=>"E-\x6dail\x20\x61\x64d\x72\x65\x73\x73\x20you\x20e\x6etered\x20\x61lr\x65\x61dy \x65\x78is\x74\x73! Pl\x65as\x65\x20\x75\x73e\x20\x61\x20\x64i\x66\x66\x72\x65nt\x20e-\x6da\x69\x6c a\x64d\x72\x65\x73\x73!")));}else if(!preg_match("/^[\x5f\\.0-9\x61-\x7aA-Z-]+@([0-\x39a-\x7aA-Z][\x30-\x39\x61-\x7aA-Z-]+\x5c.)+[\x61-\x7a\x41-\x5a]{\x32,6}\$/\x69",${${"\x47\x4cO\x42A\x4cS"}["\x65q\x6bz\x78\x67w\x6e"]})){${"\x47L\x4f\x42A\x4cS"}["\x6c\x6a\x7a\x6a\x64\x75m\x75v\x6d"]="\x69\x6e\x63\x6f\x6dp\x6c\x65\x74e";${${"\x47LOB\x41LS"}["l\x6a\x7a\x6a\x64umu\x76\x6d"]}=1;die(json_encode(array("\x64\x6fne"=>"\x66\x61il","er\x72or"=>"\x50\x6c\x65\x61se\x20\x65\x6et\x65\x72\x20a \x76\x61l\x69d \x65-ma\x69\x6c\x20ad\x64re\x73\x73\x21\x20o\x72 c\x6fnta\x63\x74\x20u\x73!")));}else if(strlen(${$pwxthmpkgdp})>20||${$mzwkiampa}==""){${"G\x4cO\x42A\x4cS"}["\x66n\x62c\x70\x62i\x61"]="inco\x6dp\x6c\x65t\x65";${${"G\x4cO\x42\x41\x4c\x53"}["fnb\x63pb\x69\x61"]}=1;die(json_encode(array("do\x6e\x65"=>"f\x61\x69\x6c","\x65\x72\x72\x6fr"=>"Y\x6f\x75r u\x73\x65r\x6e\x61\x6d\x65 mus\x74\x20be \x75\x6eder\x2020\x20\x63h\x61rac\x74\x65\x72\x73!")));}else if(!${${"G\x4c\x4fB\x41\x4c\x53"}["tpc\x62\x7a\x6b"]}[0]){${"\x47L\x4f\x42\x41\x4c\x53"}["\x70\x76\x68n\x64\x6a\x6dkq"]="\x69n\x63\x6f\x6dpl\x65\x74e";${${"G\x4cO\x42\x41LS"}["\x70v\x68\x6e\x64\x6a\x6d\x6b\x71"]}=1;die(json_encode(array("\x64one"=>"fail","e\x72ro\x72"=>"\x52\x65\x67\x69st\x72at\x69o\x6es\x20\x63los\x65\x64.")));}else{${"\x47L\x4f\x42AL\x53"}["q\x66\x6d\x6e\x76k\x63"]="s\x61\x6c\x74";${${"G\x4cOB\x41L\x53"}["q\x66m\x6evkc"]}="\x66\x73978";$zhapzpgdqjuk="i\x70";${"\x47\x4c\x4f\x42A\x4c\x53"}["n\x72k\x6c\x67\x76\x73pd"]="\x70assw\x6frd";${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x79\x6e\x79qd\x77\x73\x67"]}=md5(${${"\x47\x4cOB\x41\x4c\x53"}["n\x72\x6b\x6c\x67\x76\x73pd"]}.${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x72\x66\x78\x68\x6d\x75"]});$kcfist="\x69p";$sclati="\x69p";${$zhapzpgdqjuk}=VisitorIP();${$kcfist}=mysql_real_escape_string(${$sclati});mysql_query("I\x4e\x53\x45R\x54 INT\x4f\x20\x75\x73\x65\x72\x73 V\x41\x4cU\x45S('$username',\x20'$password\x27,\x20'$icq',\x20'$email', \x27$ip\x27,\x20\x6e\x6f\x77(),\x20\x27\x4e\x55L\x4c\x27,\x200,\x200.0\x30, […]

Viewing all articles
Browse latest Browse all 222

Trending Articles