{ "ml": { "v": "4", "fs": [ { "id": 0, "prob": 0.9999334812164307, "class": 2 } ], "prob": 0.9999335, "class": 2, "models": [ { "m": "az", "prob": 0.998825, "class": 1 }, { "m": "az/scripts", "prob": 0.999723, "class": 2 }, { "m": "az/php", "prob": 0.9999335, "class": 2 } ], "version": "v16.16", "thresholds": [ 0.9961138, 0.99909174 ], "analyzed_at": "2026-05-08T23:05:24Z" }, "path": "6363d2b9fe57a41dd2e0b93c34e28a59", "raw": { "v": "4", "fs": [ { "f": "O₈(C₁₄As₄Ca₃XeErI₂LaS₂)H₆(Po₃Cm₅CrDb₇F₂Os)Md₃(Pa)Th₂", "k": { "source.imports[0]": "ReplaceFileTemplate", "source.imports[1]": "ReplaceTemplates", "source.imports[2]": "applyEnumer", "source.imports[3]": "array_map", "source.imports[4]": "array_merge", "source.imports[5]": "array_rand", "source.imports[6]": "ars2exec", "source.imports[7]": "base64_decode", "source.imports[8]": "base64_encode", "source.imports[9]": "c992exec", "source.strings[0]": "\r\n\u003cnoembed\u003e\u003cxmp\u003e\u003cbody\u003e\u003c/xmp\u003e\u003c/noembed\u003e\u003cnoembed\u003e\u003cxmp\u003e\u003c/body\u003e\u003c/html\u003e\u003c/xmp\u003e\u003c/noembed\u003e\u003ctitle\u003eLocked By RouGani\u003c/title\u003e\u003ccenter\u003e\u003cbody background=white\u003ctable width=1 bgcolor=black\u003e\u003ctr\u003e\u003ctd\u003e\u003cfont size=1 face=verdana\u003e\u003ccenter\u003e\u003cb\u003e\u003c/font\u003e\u003c/a\u003e\u003cbr\u003e\u003c/b\u003e\u003c/center\u003e\u003cform method=post\u003e\u003cfont size=1 face=verdana color=bc2430\u003e\u003cstrong\u003e\u003ccenter\u003e|By RouGani|\u003cbr\u003e| Please Password |\u003c/center\u003e\u003c/strong\u003e\u003cbr\u003e\u003cinput type=password name=pass size=10\u003e\u003c/form\u003e\r\n\u003c/td\u003e\u003c/tr\u003e\u003c/table\u003e\r\n", "source.strings[1]": " == window.location.protocol ? ", "source.strings[2]": " minutes", "source.strings[3]": " Отсутствует доступ на запись к скрипту! Смена пароля невозможна. \u003cb\u003eИзмените права на 666\u003c/b\u003e на время смены пароля.", "source.strings[4]": " минут", "source.strings[5]": "), g = ", "source.strings[6]": ")[0] || d[g](", "source.strings[7]": ")[0];\r\n\t\t h.appendChild(s);\r\n\t\t })();\u003c/script\u003e\r\n\t\t \u003cdiv data-description=\"Anonymous e-mail service with attaching files - alexusMailer\" data-title=\"Anonymous remailer - alexusMailer\" data-url=\"http://mailer.a-l-e-x-u-s.ru/en/\" class=\"pluso\" data-options=\"big,square,line,horizontal,counter,theme=08\" data-services=\"vkontakte,odnoklassniki,facebook,twitter,google,moimir,email,print\" data-background=\"#ebebeb\"\u003e\u003c/div\u003e\r\n\t\t\t\t", "source.strings[8]": ")[0];\r\n\t\t h.appendChild(s);\r\n\t\t })();\u003c/script\u003e\r\n\t\t \u003cdiv data-description=\"Сервис анонимной отправки электронной почты с подменой адреса и прикреплением файлов йаПосылалка\" data-title=\"Сервис анонимной отправки почты с подменой адреса - йаПосылалка\" data-url=\"http://mailer.a-l-e-x-u-s.ru/\" class=\"pluso\" data-options=\"big,square,line,horizontal,counter,theme=08\" data-services=\"vkontakte,odnoklassniki,facebook,twitter,google,moimir,email,print\" data-background=\"#ebebeb\"\u003e\u003c/div\u003e\r\n\t\t\t\t\r\n\t\t\t\t\u003cdiv id=\"vk_comments\"\u003e\u003c/div\u003e\r\n\t\t\t\t\u003cscript type=\"text/javascript\"\u003e\r\n\t\t\t\tVK.Widgets.Comments(\"vk_comments\", {limit: 10, width: \"660\", attach: false, norealtime:1}, \"mailer.a-l-e-x-u-s.ru\");\r\n\t\t\t\t\u003c/script\u003e", "source.strings[9]": "--$boundary\\n", "source.has_imports": true, "source.imports[10]": "chunk_split", "source.imports[11]": "clearstatcache", "source.imports[12]": "count", "source.imports[13]": "date", "source.imports[14]": "define", "source.imports[15]": "defined", "source.imports[16]": "die", "source.imports[17]": "empty", "source.imports[18]": "error_reporting", "source.imports[19]": "eval", "source.imports[20]": "explode", "source.imports[21]": "file_exists", "source.imports[22]": "file_get_contents", "source.imports[23]": "file_put_contents", "source.imports[24]": "function_exists", "source.imports[25]": "get_content", "source.imports[26]": "get_headers", "source.imports[27]": "get_magic_quotes_gpc", "source.imports[28]": "header", "source.imports[29]": "http_build_query", "source.imports[30]": "implode", "source.imports[31]": "ini_set", "source.imports[32]": "intval", "source.imports[33]": "is_array", "source.imports[34]": "is_readable", "source.imports[35]": "is_writable", "source.imports[36]": "isset", "source.imports[37]": "json_decode", "source.imports[38]": "json_encode", "source.imports[39]": "mail", "source.imports[40]": "makeAttach", "source.imports[41]": "mb_orig_mail", "source.imports[42]": "md5", "source.imports[43]": "parse_url", "source.imports[44]": "preg_match", "source.imports[45]": "preg_match_all", "source.imports[46]": "preg_quote", "source.imports[47]": "preg_replace", "source.imports[48]": "print_r", "source.imports[49]": "r572exec", "source.imports[50]": "rand", "source.imports[51]": "randomstr", "source.imports[52]": "session_start", "source.imports[53]": "set_time_limit", "source.imports[54]": "str_repeat", "source.imports[55]": "str_replace", "source.imports[56]": "stream_context_create", "source.imports[57]": "stripslashes", "source.imports[58]": "strlen", "source.imports[59]": "strpos", "source.imports[60]": "strstr", "source.imports[61]": "strtotime", "source.imports[62]": "substr", "source.imports[63]": "tr", "source.imports[64]": "trim", "source.imports[65]": "urlencode", "source.imports[66]": "wso2exec", "source.strings[10]": ".png\\\"\\n", "source.strings[11]": "//share.pluso.ru/pluso-like.js", "source.strings[12]": "/\\.(jpeg|jpg)/i", "source.strings[13]": "/\\.gif/i", "source.strings[14]": "/\\.png/i", "source.strings[15]": ";\r\n\t\t s.type = ", "source.strings[16]": ";\r\n\t\t var h=d[g](", "source.strings[17]": "; charset=utf-8", "source.strings[18]": "; name=\\", "source.strings[19]": "; s.async = true;\r\n\t\t s.src = (", "source.strings[20]": "; s.charset=", "source.strings[21]": "\u003c/span\u003e", "source.strings[22]": "\u003cbutton class=\"btn\" onclick=\"pingoutservers()\"\u003eCheck servers\u003c/button\u003e (Unavailable will be auto-removed)", "source.strings[23]": "\u003cbutton class=\"btn\" onclick=\"pingoutservers()\"\u003eПроверить сервера\u003c/button\u003e (недоступные будут автоматически удалены из списка)", "source.strings[24]": "\u003ccenter\u003e\u003ch2\u003ealexusMailer service\u003c/h2\u003e\u003c/center\u003e\r\n\t\t\t\t\u003cp\u003e\r\n\t\t\t\t\talexusMailer service is based on the eponymous script to send an anonymous e-mail.\r\n\t\t\t\t\tFor this service is always used the latest version of the alexusMailer, but it have some limitations to protect it from being used as a spammer.\r\n\t\t\t\t\t\u003cbr\u003e\u003cb\u003eLimitations:\u003c/b\u003e\u003cbr\u003e\r\n\t\t\t\t\t\u003col\u003e\r\n\t\t\t\t\t\t\u003cli\u003eAllowed to send one letter per hour\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eTo send you must enter the captcha\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eAdvertisement\u003c/li\u003e\r\n\t\t\t\t\t\u003c/ol\u003e\r\n\t\t\t\t\t\u003cb\u003eAnonymous mailing service is completely free\u003c/b\u003e and exists in demonstration purposes.\u003cbr\u003e\r\n\t\t\t\t\t\u003ccenter\u003e\u003cbutton class=\"btn btn-primary btn-large prime-button\"\u003eSend mail\u003c/button\u003e\u003c/center\u003e\t\t\t\t\t\r\n\t\t\t\t\u003c/p\u003e\r\n\t\t\t\t\u003cp\u003e\r\n\t\t\t\t\tYou can by the latest version of alexusMailer - anonymous mailing script for installing on your own server \u003cb\u003efor 25 USD\u003c/b\u003e.\r\n\t\t\t\t\t\u003cbr\u003eThis version \u003cb\u003ehave no any limitations\u003c/b\u003e and gives you:\u003cbr\u003e\r\n\t\t\t\t\t\u003col\u003e\r\n\t\t\t\t\t\t\u003cli\u003eFull support in installation and using\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eFixing of all errors you can find\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003ePriority accepting applications for upgrading\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eFree updates in current major version (1.*)\u003c/li\u003e\r\n\t\t\t\t\t\u003c/ol\u003e\r\n\t\t\t\t\t\u003ccenter\u003e\u003ca href=\"/en/buy/\" class=\"btn btn-primary btn-large prime-button\" style=\"color:#fff;font-weight:bold;\"\u003eBuy alexusMailer\u003c/a\u003e\u003c/center\u003e\r\n\t\t\t\t\u003c/p\u003e\r\n\t\t\t\t\u003cp\u003e\r\n\t\t\t\t\talexusMailer has a \u003cb\u003ehighly profitable partnership program\u003c/b\u003e, if a person buys alexusMailer on your affiliate link\r\n\t\t\t\t\tyou get \u003cb\u003e50% of the cost\u003c/b\u003e (12.5 USD) per sale.\u003cbr\u003e\r\n\t\t\t\t\t\u003ccenter\u003e\u003ca href=\"/en/partner/\" class=\"btn btn-primary btn-large prime-button\" style=\"color:#fff;font-weight:bold;\"\u003eBecame a partner!\u003c/a\u003e\u003c/center\u003e\r\n\t\t\t\t\u003c/p\u003e\r\n\t\t\t\t\u003cscript type=\"text/javascript\"\u003e(function() {\r\n\t\t if (window.pluso)if (typeof window.pluso.start == \"function\") return;\r\n\t\t var d = document, s = d.createElement(", "source.strings[25]": "\u003ccenter\u003e\u003ch2\u003ealexusMailer service\u003c/h2\u003e\u003c/center\u003e\r\n\t\t\t\t\u003cp\u003e\r\n\t\t\t\t\talexusMailer service is based on the eponymous script to send an anonymous e-mail.\r\n\t\t\t\t\tFor this service is always used the latest version of the alexusMailer, but it have some limitations to protect it from being used as a spammer.\r\n\t\t\t\t\t\u003cbr\u003e\u003cb\u003eLimitations:\u003c/b\u003e\u003cbr\u003e\r\n\t\t\t\t\t\u003col\u003e\r\n\t\t\t\t\t\t\u003cli\u003eAllowed to send one letter per hour\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eTo send you must enter the captcha\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eAdvertisement\u003c/li\u003e\r\n\t\t\t\t\t\u003c/ol\u003e\r\n\t\t\t\t\t\u003cb\u003eAnonymous mailing service is completely free\u003c/b\u003e and exists in demonstration purposes.\u003cbr\u003e\r\n\t\t\t\t\t\u003ccenter\u003e\u003cbutton class=\"btn btn-primary btn-large prime-button\"\u003eSend mail\u003c/button\u003e\u003c/center\u003e\t\t\t\t\t\r\n\t\t\t\t\u003c/p\u003e\r\n\t\t\t\t\u003cp\u003e\r\n\t\t\t\t\tYou can by the latest version of alexusMailer - anonymous mailing script for installing on your own server \u003cb\u003efor 25 USD\u003c/b\u003e.\r\n\t\t\t\t\t\u003cbr\u003eThis version \u003cb\u003ehave no any limitations\u003c/b\u003e and gives you:\u003cbr\u003e\r\n\t\t\t\t\t\u003col\u003e\r\n\t\t\t\t\t\t\u003cli\u003eFull support in installation and using\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eFixing of all errors you can find\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003ePriority accepting applications for upgrading\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eFree updates in current major version (1.*)\u003c/li\u003e\r\n\t\t\t\t\t\u003c/ol\u003e\r\n\t\t\t\t\t\u003ccenter\u003e\u003ca href=\"/en/buy/\" class=\"btn btn-primary btn-large prime-button\" style=\"color:#fff;font-weight:bold;\"\u003eBuy alexusMailer\u003c/a\u003e\u003c/center\u003e\r\n\t\t\t\t\u003c/p\u003e\r\n\t\t\t\t\u003cp\u003e\r\n\t\t\t\t\talexusMailer has a \u003cb\u003ehighly profitable partnership program\u003c/b\u003e, if a person buys alexusMailer on your affiliate link\r\n\t\t\t\t\tyou get \u003cb\u003e50% of the cost\u003c/b\u003e (12.5 USD) per sale.\u003cbr\u003e\r\n\t\t\t\t\t\u003ccenter\u003e\u003ca href=\"/en/partner/\" class=\"btn btn-primary btn-large prime-button\" style=\"color:#fff;font-weight:bold;\"\u003eBecame a partner!\u003c/a\u003e\u003c/center\u003e\r\n\t\t\t\t\u003c/p\u003e\r\n\t\t\t\t\u003cscript type=\"text/javascript\"\u003e(function() {\r\n\t\t if (window.pluso)if (typeof window.pluso.start == \"function\") return;\r\n\t\t var d = document, s = d.createElement(\\'script\\'), g = \\'getElementsByTagName\\';\r\n\t\t s.type = \\'text/javascript\\'; s.charset=\\'UTF-8\\'; s.async = true;\r\n\t\t s.src = (\\'https:\\' == window.location.protocol ? \\'https\\' : \\'http\\') + \\'://share.pluso.ru/pluso-like.js\\';\r\n\t\t var h=d[g](\\'head\\')[0] || d[g](\\'body\\')[0];\r\n\t\t h.appendChild(s);\r\n\t\t })();\u003c/script\u003e\r\n\t\t \u003cdiv data-description=\"Anonymous e-mail service with attaching files - alexusMailer\" data-title=\"Anonymous remailer - alexusMailer\" data-url=\"http://mailer.a-l-e-x-u-s.ru/en/\" class=\"pluso\" data-options=\"big,square,line,horizontal,counter,theme=08\" data-services=\"vkontakte,odnoklassniki,facebook,twitter,google,moimir,email,print\" data-background=\"#ebebeb\"\u003e\u003c/div\u003e\r\n\t\t\t\t", "source.strings[26]": "\u003ccenter\u003e\u003ch2\u003eСервис йаПосылалка\u003c/h2\u003e\u003c/center\u003e\r\n\t\t\t\t\u003cp\u003e\r\n\t\t\t\t\t\r\n\t\t\t\t\tСервис йаПосылалка создан на базе одноименного скрипта анонимной отправки электронной почты. \r\n\t\t\t\t\tДля сервиса всегда используется последняя версия скрипта, но при этом сервис имеет некоторые ограничения \r\n\t\t\t\t\tдля защиты его от использования в качестве спамера.\r\n\t\t\t\t\t\u003cbr\u003e\u003cb\u003eОграничения:\u003c/b\u003e\u003cbr\u003e\r\n\t\t\t\t\t\u003col\u003e\r\n\t\t\t\t\t\t\u003cli\u003eРазрешено отправлять одно письмо в час\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eДля отправки необходимо вводить капчу\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eОтображается реклама\u003c/li\u003e\r\n\t\t\t\t\t\u003c/ol\u003e\r\n\t\t\t\t\t\u003cb\u003eСервис анонимной отправки почты абсолютно бесплатен\u003c/b\u003e и существует в первую очедь в демонстрационных целях.\u003cbr\u003e\r\n\t\t\t\t\t\u003ccenter\u003e\u003cbutton class=\"btn btn-primary btn-large prime-button\"\u003eОтправить письмо\u003c/button\u003e\u003c/center\u003e\t\t\t\t\t\r\n\t\t\t\t\u003c/p\u003e\r\n\t\t\t\t\u003cp\u003e\r\n\t\t\t\t\tПоследнюю версию скрипта анонимной отправки для установки на своём сервере можно \u003cb\u003eкупить за 25$ или 750 рублей\u003c/b\u003e.\r\n\t\t\t\t\t\u003cbr\u003eВ ней \u003cb\u003eотсутствуют все ограничения\u003c/b\u003e на отправку, и обеспечиваются:\u003cbr\u003e\r\n\t\t\t\t\t\u003col\u003e\r\n\t\t\t\t\t\t\u003cli\u003eПомощь по использованию и установке\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eИсправление найденых ошибок\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eПриоритетный приём заявок по доработке\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eОбновления в пределах текущей ветки\u003c/li\u003e\r\n\t\t\t\t\t\u003c/ol\u003e\r\n\t\t\t\t\t\u003ccenter\u003e\u003ca href=\"/buy/\" class=\"btn btn-primary btn-large prime-button\" style=\"color:#fff;font-weight:bold;\"\u003eКупить\u003c/a\u003e\u003c/center\u003e\r\n\t\t\t\t\u003c/p\u003e\r\n\t\t\t\t\u003cp\u003e\r\n\t\t\t\t\tУ йаПосылалка существует \u003cb\u003eвысокодоходная партнёрская программа\u003c/b\u003e, если человек купит скрипт по вашей партнёрской ссылке,\r\n\t\t\t\t\tвы получаете \u003cb\u003e50% от стоимости\u003c/b\u003e скрипта (12.5$ или 325 рублей) с каждой продажи.\u003cbr\u003e\r\n\t\t\t\t\t\u003ccenter\u003e\u003ca href=\"/partner/\" class=\"btn btn-primary btn-large prime-button\" style=\"color:#fff;font-weight:bold;\"\u003eСтать партнёром!\u003c/a\u003e\u003c/center\u003e\r\n\t\t\t\t\u003c/p\u003e\r\n\t\t\t\t\u003cscript type=\"text/javascript\"\u003e(function() {\r\n\t\t if (window.pluso)if (typeof window.pluso.start == \"function\") return;\r\n\t\t var d = document, s = d.createElement(", "source.strings[27]": "\u003ccenter\u003e\u003ch2\u003eСервис йаПосылалка\u003c/h2\u003e\u003c/center\u003e\r\n\t\t\t\t\u003cp\u003e\r\n\t\t\t\t\t\r\n\t\t\t\t\tСервис йаПосылалка создан на базе одноименного скрипта анонимной отправки электронной почты. \r\n\t\t\t\t\tДля сервиса всегда используется последняя версия скрипта, но при этом сервис имеет некоторые ограничения \r\n\t\t\t\t\tдля защиты его от использования в качестве спамера.\r\n\t\t\t\t\t\u003cbr\u003e\u003cb\u003eОграничения:\u003c/b\u003e\u003cbr\u003e\r\n\t\t\t\t\t\u003col\u003e\r\n\t\t\t\t\t\t\u003cli\u003eРазрешено отправлять одно письмо в час\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eДля отправки необходимо вводить капчу\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eОтображается реклама\u003c/li\u003e\r\n\t\t\t\t\t\u003c/ol\u003e\r\n\t\t\t\t\t\u003cb\u003eСервис анонимной отправки почты абсолютно бесплатен\u003c/b\u003e и существует в первую очедь в демонстрационных целях.\u003cbr\u003e\r\n\t\t\t\t\t\u003ccenter\u003e\u003cbutton class=\"btn btn-primary btn-large prime-button\"\u003eОтправить письмо\u003c/button\u003e\u003c/center\u003e\t\t\t\t\t\r\n\t\t\t\t\u003c/p\u003e\r\n\t\t\t\t\u003cp\u003e\r\n\t\t\t\t\tПоследнюю версию скрипта анонимной отправки для установки на своём сервере можно \u003cb\u003eкупить за 25$ или 750 рублей\u003c/b\u003e.\r\n\t\t\t\t\t\u003cbr\u003eВ ней \u003cb\u003eотсутствуют все ограничения\u003c/b\u003e на отправку, и обеспечиваются:\u003cbr\u003e\r\n\t\t\t\t\t\u003col\u003e\r\n\t\t\t\t\t\t\u003cli\u003eПомощь по использованию и установке\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eИсправление найденых ошибок\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eПриоритетный приём заявок по доработке\u003c/li\u003e\r\n\t\t\t\t\t\t\u003cli\u003eОбновления в пределах текущей ветки\u003c/li\u003e\r\n\t\t\t\t\t\u003c/ol\u003e\r\n\t\t\t\t\t\u003ccenter\u003e\u003ca href=\"/buy/\" class=\"btn btn-primary btn-large prime-button\" style=\"color:#fff;font-weight:bold;\"\u003eКупить\u003c/a\u003e\u003c/center\u003e\r\n\t\t\t\t\u003c/p\u003e\r\n\t\t\t\t\u003cp\u003e\r\n\t\t\t\t\tУ йаПосылалка существует \u003cb\u003eвысокодоходная партнёрская программа\u003c/b\u003e, если человек купит скрипт по вашей партнёрской ссылке,\r\n\t\t\t\t\tвы получаете \u003cb\u003e50% от стоимости\u003c/b\u003e скрипта (12.5$ или 325 рублей) с каждой продажи.\u003cbr\u003e\r\n\t\t\t\t\t\u003ccenter\u003e\u003ca href=\"/partner/\" class=\"btn btn-primary btn-large prime-button\" style=\"color:#fff;font-weight:bold;\"\u003eСтать партнёром!\u003c/a\u003e\u003c/center\u003e\r\n\t\t\t\t\u003c/p\u003e\r\n\t\t\t\t\u003cscript type=\"text/javascript\"\u003e(function() {\r\n\t\t if (window.pluso)if (typeof window.pluso.start == \"function\") return;\r\n\t\t var d = document, s = d.createElement(\\'script\\'), g = \\'getElementsByTagName\\';\r\n\t\t s.type = \\'text/javascript\\'; s.charset=\\'UTF-8\\'; s.async = true;\r\n\t\t s.src = (\\'https:\\' == window.location.protocol ? \\'https\\' : \\'http\\') + \\'://share.pluso.ru/pluso-like.js\\';\r\n\t\t var h=d[g](\\'head\\')[0] || d[g](\\'body\\')[0];\r\n\t\t h.appendChild(s);\r\n\t\t })();\u003c/script\u003e\r\n\t\t \u003cdiv data-description=\"Сервис анонимной отправки электронной почты с подменой адреса и прикреплением файлов йаПосылалка\" data-title=\"Сервис анонимной отправки почты с подменой адреса - йаПосылалка\" data-url=\"http://mailer.a-l-e-x-u-s.ru/\" class=\"pluso\" data-options=\"big,square,line,horizontal,counter,theme=08\" data-services=\"vkontakte,odnoklassniki,facebook,twitter,google,moimir,email,print\" data-background=\"#ebebeb\"\u003e\u003c/div\u003e\r\n\t\t\t\t\r\n\t\t\t\t\u003cdiv id=\"vk_comments\"\u003e\u003c/div\u003e\r\n\t\t\t\t\u003cscript type=\"text/javascript\"\u003e\r\n\t\t\t\tVK.Widgets.Comments(\"vk_comments\", {limit: 10, width: \"660\", attach: false, norealtime:1}, \"mailer.a-l-e-x-u-s.ru\");\r\n\t\t\t\t\u003c/script\u003e", "source.strings[28]": "\u003ch2\u003eHelp\u003c/h2\u003e\r\n\t\t\t\t\u003ch3\u003eWhat is it?\u003c/h3\u003e\r\n\t\t\t\tAnonymous mailing service from random or foreign email in plain text or html format.\u003cbr\u003e\r\n\t\t\t\t\u003cb\u003eFormat html(e)\u003c/b\u003e allows automatically move images from img tag or background attribute to attach, what makes letter independent from external server for correct display. \r\n\t\t\t\tAlso in e-mail clients (the bat, outlook, ...) will be displayed immediately.\u003cbr\u003e\r\n\t\t\t\t\u003cb\u003eesreveR\u003c/b\u003e change symbol possition in back order and set css for correct display in mail.\u003cbr\u003e\r\n\t\t\t\t\u003cb\u003ePreview\u003c/b\u003e can hepl to see how mail will look after all macro will be replaced.\u003cbr\u003e\r\n\t\t\t\t\u003cb\u003eSave\\Load\u003c/b\u003e is helpful in making collection of regular mailing templates.\u003cbr\u003e\r\n\t\t\t\t\u003cb\u003eRecipient list loading\u003c/b\u003e available by clicking on button near the recipient field.\u003cbr\u003e\r\n\t\t\t\t\u003cb\u003eTimeout\u003c/b\u003e between sending mails.\u003cbr\u003e\r\n\t\t\t\t\u003cb\u003eExternal servers\u003c/b\u003e for distributing you mails between different servers \u003cbr\u003e\u003cb style=\"color:red;\"\u003eBefore using external servers ensure that they work correct.\u003c/b\u003e\r\n\t\t\t\t\u003cbr\u003e\u003cbr\u003e\u003ca href=\"http://mailer.a-l-e-x-u-s.ru/docs/alexusMailer_v1.7.en.pdf\"\u003e\u003cspan class=\"label label-warning\"\u003e\u003ci class=\"icon-file icon-white\"\u003e\u003c/i\u003e Download full documentation\u003c/span\u003e\u003c/a\u003e\r\n\t\t\t\t\u003chr\u003e\r\n\t\t\t\t\u003ch3\u003eMacro (in mail body, headers and additional fields)\u003c/h3\u003e\r\n\t\t\t\t\u003cul\u003e\r\n\t\t\t\t\t\u003cli\u003eRecipient - \u003cb\u003e[TO-EMAIL]\u003c/b\u003e\u003c/li\u003e\r\n\t\t\t\t\t\u003cli\u003eFrom, name - \u003cb\u003e[FROM-NAME]\u003c/b\u003e\u003c/li\u003e\r\n\t\t\t\t\t\u003cli\u003eFrom, email - \u003cb\u003e[FROM-EMAIL]\u003c/b\u003e\u003c/li\u003e\r\n\t\t\t\t\t\u003cli\u003eSubject - \u003cb\u003e[THEME]\u003c/b\u003e\u003c/li\u003e\r\n\t\t\t\t\t\u003cli\u003eAdditional field - \u003cb\u003e[ADD0]\u003c/b\u003e , \u003cb\u003e[ADD1]\u003c/b\u003e, \u003cb\u003e[ADD2]\u003c/b\u003e ...\u003c/li\u003e\r\n\t\t\t\t\t\u003cli\u003eRandom number (5000..6000)- \u003cb\u003e[RAND]\u003c/b\u003e\u003c/li\u003e\r\n\t\t\t\t\t\u003cli\u003eRandom number (from A to B)- \u003cb\u003e[RAND-A-B]\u003c/b\u003e , example \u003cb\u003e[RAND-10-99]\u003c/b\u003e\u003c/li\u003e\r\n\t\t\t\t\t\u003cli\u003eRandom text - \u003cb\u003e[RAND:text1|text2|...]\u003c/b\u003e , example \u003cb\u003e[RAND:hello dude|hello|hi|wazzup]\u003c/b\u003e\u003c/li\u003e\r\n\t\t\t\t\t\u003cli\u003eEnumeration - \u003cb\u003e[ENUM:text1|text2|...]\u003c/b\u003e , example \u003cb\u003e[ENUM:wellcome|hi|how are you]\u003c/b\u003e\u003c/li\u003e\r\n\t\t\t\t \u003c/ul\u003e\r\n\t\t\t\t \u003ch3\u003eMacro for date and time\u003c/h3\u003e\r\n\t\t\t\t \u003cul\u003e\r\n\t\t\t\t \t\u003cli\u003e\u003cb\u003e[DATE]\u003c/b\u003e - Current date (\u003cb\u003e[DATE-4]\u003c/b\u003e - Current date minus 4 days) (\u003cb\u003e[DATE+4]\u003c/b\u003e - Current date plus 4 days)\r\n\t\t\t\t \t\t\u003cul\u003e\r\n\t\t\t\t \t\t\t\u003cli\u003e\u003cb\u003e[DAY]\u003c/b\u003e - Current day (\u003cb\u003e[DAY+3]\u003c/b\u003e - Current day plus 3 days)\u003c/li\u003e\r\n\t\t\t\t \t\t\t\u003cli\u003e\u003cb\u003e[MONTH]\u003c/b\u003e - Current month (\u003cb\u003e[MONTH-2]\u003c/b\u003e - Current month minus 2 months)\u003c/li\u003e\r\n\t\t\t\t \t\t\t\u003cli\u003e\u003cb\u003e[YEAR]\u003c/b\u003e - Current year (\u003cb\u003e[YEAR-1]\u003c/b\u003e - Current year minus 1 year)\u003c/li\u003e\r\n\t\t\t\t \t\t\u003c/ul\u003e\r\n\t\t\t\t \t\u003c/li\u003e\r\n\t\t\t\t \t\u003cli\u003e\u003cb\u003e[TIME]\u003c/b\u003e - Current time (\u003cb\u003e[TIME-4]\u003c/b\u003e - Current time minus 4 minutes)\r\n\t\t\t\t \t\t\u003cul\u003e\r\n\t\t\t\t \t\t\t\u003cli\u003e\u003cb\u003e[HOUR]\u003c/b\u003e - Current hour (\u003cb\u003e[HOUR-3]\u003c/b\u003e - Current hour minus 3 hours)\u003c/li\u003e\r\n\t\t\t\t \t\t\t\u003cli\u003e\u003cb\u003e[MINUTE]\u003c/b\u003e - Current minute (\u003cb\u003e[MINUTE-2]\u003c/b\u003e - Current minute minus 2 minutes)\u003c/li\u003e\r\n\t\t\t\t \t\t\u003c/ul\u003e\r\n\t\t\t\t \t\u003c/li\u003e\r\n\t\t\t\t \u003c/ul\u003e\r\n\t\t\t\t\u003chr\u003e\r\n\t\t\t\tWarning! This service was created only in demonstration purposes. All responsibility for out law actions is only on you!", "source.strings[29]": "\u003ch2\u003eСправка\u003c/h2\u003e\r\n\t\t\t\t\u003ch3\u003eЧто это?\u003c/h3\u003e\r\n\t\t\t\tСервис анонимной отправки email сообщений с произвольного/чужого адреса в текстовом или html формате.\u003cbr\u003e\r\n\t\t\t\t\u003cb\u003eФормат html(e)\u003c/b\u003e позволяет автоматически перенести в attach картинки из тегов img или атрибута background, что делает письмо автономным и не требует внешнего сервера для корректного отображения. \r\n\t\t\t\tТак же в почтовых клиентах (the bat, outlook, ...) картинки отображаются сразу.\u003cbr\u003e\r\n\t\t\t\t\u003cb\u003eesreveR\u003c/b\u003e меняет символы в обратном порядке и устанавливает css для их отображения в верном порядке.\u003cbr\u003e\r\n\t\t\t\t\u003cb\u003eПредпросмотр\u003c/b\u003e позволяет посмотреть как будет выглядеть письмо когда все макросы будут заменены.\u003cbr\u003e\r\n\t\t\t\t\u003cb\u003eСохранение\\Загрука\u003c/b\u003e позволяет экономить время и делать шаблоны для часто используемых писем.\u003cbr\u003e\r\n\t\t\t\t\u003cb\u003eПодгрузка списка\u003c/b\u003e адресатов возможна нажатием на кнопку рядом с соотв. полем.\u003cbr\u003e\r\n\t\t\t\t\u003cb\u003eЗадержка\u003c/b\u003e между отправкой писем\u003cbr\u003e\r\n\t\t\t\t\u003cb\u003eВнешние серверы\u003c/b\u003e для распределения рассылки между разными йаПосылалками \u003cbr\u003e\u003cb style=\"color:red;\"\u003eПеред использованием внешних посылалок проверьте корректность их работы на сервере\u003c/b\u003e\r\n\t\t\t\t\u003cbr\u003e\u003cbr\u003e\u003ca href=\"http://mailer.a-l-e-x-u-s.ru/docs/alexusMailer_v1.7.ru.pdf\"\u003e\u003cspan class=\"label label-warning\"\u003e\u003ci class=\"icon-file icon-white\"\u003e\u003c/i\u003e Скачать полную документацию\u003c/span\u003e\u003c/a\u003e\r\n\t\t\t\t\u003chr\u003e\r\n\t\t\t\t\u003ch3\u003eМакросы (в теле письма и в заголовках)\u003c/h3\u003e\r\n\t\t\t\t\u003cul\u003e\r\n\t\t\t\t\t\u003cli\u003eКому - \u003cb\u003e[TO-EMAIL]\u003c/b\u003e\u003c/li\u003e\r\n\t\t\t\t\t\u003cli\u003eОт кого, имя - \u003cb\u003e[FROM-NAME]\u003c/b\u003e\u003c/li\u003e\r\n\t\t\t\t\t\u003cli\u003eОт кого, адрес email - \u003cb\u003e[FROM-EMAIL]\u003c/b\u003e\u003c/li\u003e\r\n\t\t\t\t\t\u003cli\u003eТема - \u003cb\u003e[THEME]\u003c/b\u003e\u003c/li\u003e\r\n\t\t\t\t\t\u003cli\u003eДополнительное поле - \u003cb\u003e[ADD0]\u003c/b\u003e , \u003cb\u003e[ADD1]\u003c/b\u003e, \u003cb\u003e[ADD2]\u003c/b\u003e ...\u003c/li\u003e\r\n\t\t\t\t\t\u003cli\u003eСлучайное число (5000..6000)- \u003cb\u003e[RAND]\u003c/b\u003e\u003c/li\u003e\r\n\t\t\t\t\t\u003cli\u003eСлучайное число (от A до B)- \u003cb\u003e[RAND-A-B]\u003c/b\u003e , например \u003cb\u003e[RAND-10-99]\u003c/b\u003e\u003c/li\u003e\r\n\t\t\t\t\t\u003cli\u003eСлучайный текст - \u003cb\u003e[RAND:text1|text2|...]\u003c/b\u003e , например \u003cb\u003e[RAND:hello dude|hello|hi|wazzup]\u003c/b\u003e\u003c/li\u003e\r\n\t\t\t\t\t\u003cli\u003eПеречисление - \u003cb\u003e[ENUM:text1|text2|...]\u003c/b\u003e , например \u003cb\u003e[ENUM:здравствуйте|привет|как дела]\u003c/b\u003e\u003c/li\u003e\r\n\t\t\t\t \u003c/ul\u003e\r\n\t\t\t\t \u003ch3\u003eМакросы даты и времени\u003c/h3\u003e\r\n\t\t\t\t \u003cul\u003e\r\n\t\t\t\t \t\u003cli\u003e\u003cb\u003e[DATE]\u003c/b\u003e - Текущая дата (\u003cb\u003e[DATE-4]\u003c/b\u003e - Текущая дата минус 4 дня) (\u003cb\u003e[DATE+4]\u003c/b\u003e - Текущая дата плюс 4 дня)\r\n\t\t\t\t \t\t\u003cul\u003e\r\n\t\t\t\t \t\t\t\u003cli\u003e\u003cb\u003e[DAY]\u003c/b\u003e - Текущий день (\u003cb\u003e[DAY+3]\u003c/b\u003e - Текущий день плюс 3 дня)\u003c/li\u003e\r\n\t\t\t\t \t\t\t\u003cli\u003e\u003cb\u003e[MONTH]\u003c/b\u003e - Текущий месяц (\u003cb\u003e[MONTH-2]\u003c/b\u003e - Текущий месяц минус 2 месяца)\u003c/li\u003e\r\n\t\t\t\t \t\t\t\u003cli\u003e\u003cb\u003e[YEAR]\u003c/b\u003e - Текущий год (\u003cb\u003e[YEAR-1]\u003c/b\u003e - Текущий год минус 1 год)\u003c/li\u003e\r\n\t\t\t\t \t\t\u003c/ul\u003e\r\n\t\t\t\t \t\u003c/li\u003e\r\n\t\t\t\t \t\u003cli\u003e\u003cb\u003e[TIME]\u003c/b\u003e - Текущее время (\u003cb\u003e[TIME-4]\u003c/b\u003e - Текущее время минус 4 минуты)\r\n\t\t\t\t \t\t\u003cul\u003e\r\n\t\t\t\t \t\t\t\u003cli\u003e\u003cb\u003e[HOUR]\u003c/b\u003e - Текущий час (\u003cb\u003e[HOUR-3]\u003c/b\u003e - Текущий час минус 3 часа)\u003c/li\u003e\r\n\t\t\t\t \t\t\t\u003cli\u003e\u003cb\u003e[MINUTE]\u003c/b\u003e - Текущий месяц (\u003cb\u003e[MINUTE-2]\u003c/b\u003e - Текущая минута минус 2 минуты)\u003c/li\u003e\r\n\t\t\t\t \t\t\u003c/ul\u003e\r\n\t\t\t\t \t\u003c/li\u003e\r\n\t\t\t\t \u003c/ul\u003e\r\n\t\t\t\t\u003chr\u003e\r\n\t\t\t\tВнимание! Сервис предоставлен исключительно для ознакомления. Ответственность за возможно незаконное использование несете только Вы.", "source.strings[30]": "\u003cspan class='tr-", "source.strings[31]": "\u003cspan class='tr-$name'\u003e", "source.strings[32]": "=?UTF-8?B?", "source.strings[33]": "?= \u003c$frommail\u003e", "source.strings[34]": "Additional field", "source.strings[35]": "Anonymous e-mail service", "source.strings[36]": "Attach file", "source.strings[37]": "Authentification required!", "source.strings[38]": "Back to editor", "source.strings[39]": "Cancel", "source.strings[40]": "Check log:", "source.strings[41]": "Content-Transfer-Encoding: 8bit", "source.strings[42]": "Content-Transfer-Encoding: 8bit\\n\\n", "source.strings[43]": "Content-Type: application/octet-stream; name=", "source.strings[44]": "Content-Type: application/octet-stream; name=\\", "source.strings[45]": "Content-Type: image/", "source.strings[46]": "Content-type: ", "source.strings[47]": "Content-type: $tip; charset=utf-8\\n", "source.strings[48]": "Content-type: multipart/mixed; boundary=", "source.strings[49]": "Content-type: multipart/mixed; boundary=\\\"$boundary\\\"\\n", "source.strings[50]": "Content-type: text/html; charset=", "source.strings[51]": "Content-type: text/html; charset=\\\"utf-8\\\"\\n", "source.strings[52]": "Content-type: text/html; charset=utf-8;", "source.strings[53]": "Delete", "source.strings[54]": "Donate to developer", "source.strings[55]": "External servers", "source.strings[56]": "From, email", "source.strings[57]": "From, name", "source.strings[58]": "From: ", "source.strings[59]": "From: $from\\n", "source.strings[60]": "Growing bamboo under the bed", "source.strings[61]": "HTTP/1.0 401 Unauthorized", "source.strings[62]": "History max length", "source.strings[63]": "MIME-Version: 1.0;", "source.strings[64]": "MIME-Version: 1.0;\\n", "source.strings[65]": "Mail type", "source.strings[66]": "PHP_AUTH_PW", "source.strings[67]": "PHP_AUTH_USER", "source.strings[68]": "Password", "source.strings[69]": "Password succesfully changed!", "source.strings[70]": "Preview", "source.strings[71]": "Primary", "source.strings[72]": "QUERY_STRING", "source.strings[73]": "Read \u003ca href=\"http://mailer.a-l-e-x-u-s.ru/docs/alexusMailer_v1.7.en.pdf\"\u003e\u003cspan class=\"label label-warning\"\u003edocumentation\u003c/span\u003e\u003c/a\u003e to learn more about external servers.", "source.strings[74]": "Recipient", "source.strings[75]": "Remove password", "source.strings[76]": "Reply-To: ", "source.strings[77]": "Reply-To: {$email[replymail]}\\n", "source.strings[78]": "Reply-to, email", "source.strings[79]": "Resume", "source.strings[80]": "RouGGa", "source.strings[81]": "Script file is not writable! Password change imposible. \u003cb\u003eChange file rights to 666\u003c/b\u003e for password change.", "source.strings[82]": "Security", "source.strings[83]": "Security code", "source.strings[84]": "Sended to ", "source.strings[85]": "Sending", "source.strings[86]": "Sending after ", "source.strings[87]": "Sending available", "source.strings[88]": "Sending limit is 1 per hour", "source.strings[89]": "Sending will be available less in one minute", "source.strings[90]": "Set password", "source.strings[91]": "Settings", "source.strings[92]": "Status", "source.strings[93]": "Subject", "source.strings[94]": "Tech Support", "source.strings[95]": "There was an error during pass change, may be script file is not writable.", "source.strings[96]": "Thread nubmer:", "source.strings[97]": "Timeout in seconds:", "source.strings[98]": "Upload", "source.strings[99]": "Upload list", "source.functions[0]": "ReplaceFileTemplate", "source.functions[1]": "ReplaceTemplates", "source.functions[2]": "applyEnumer", "source.functions[3]": "ars2exec", "source.functions[4]": "c992exec", "source.functions[5]": "get_content", "source.functions[6]": "makeAttach", "source.functions[7]": "r572exec", "source.functions[8]": "stripslashes_deep", "source.functions[9]": "tr", "source.strings[100]": "Upload template", "source.strings[101]": "Use external servers for sending", "source.strings[102]": "Use http proxy", "source.strings[103]": "VERSION", "source.strings[104]": "WWW-Authenticate: Basic realm=\"IMAIL", "source.strings[105]": "WWW-Authenticate: Basic realm=\"IMAIL\"", "source.strings[106]": "Wrong login or password!", "source.strings[107]": "Wrong security code", "source.strings[108]": "add. field", "source.strings[109]": "addfield", "source.strings[110]": "addfield2", "source.strings[111]": "additional", "source.strings[112]": "alexusMailer", "source.strings[113]": "attachfile", "source.strings[114]": "backtoeditor", "source.strings[115]": "badcaptcha", "source.strings[116]": "captcha", "source.strings[117]": "delete", "source.strings[118]": "description_service", "source.strings[119]": "display_errors", "source.strings[120]": "display_startup_errors", "source.strings[121]": "donatedevelopment", "source.strings[122]": "enumer", "source.strings[123]": "frommail", "source.strings[124]": "fromname", "source.strings[125]": "getElementsByTagName", "source.strings[126]": "hellopage", "source.strings[127]": "helppage", "source.strings[128]": "html with image auto-attach", "source.strings[129]": "html с переносом картинок в аттач", "source.strings[130]": "https:", "source.strings[131]": "keywords_service", "source.strings[132]": "mailtype", "source.strings[133]": "need_auth", "source.strings[134]": "password", "source.strings[135]": "plain text", "source.strings[136]": "plaintext", "source.strings[137]": "preview", "source.strings[138]": "process-cancel", "source.strings[139]": "process-pause", "source.strings[140]": "process-resume", "source.strings[141]": "recipient", "source.strings[142]": "replymail", "source.strings[143]": "script", "source.strings[144]": "sendafter", "source.strings[145]": "sendafter2", "source.strings[146]": "sendavailable", "source.strings[147]": "sendedto", "source.strings[148]": "sendlessminute", "source.strings[149]": "sendlimit", "source.strings[150]": "settings", "source.strings[151]": "settings-history-length", "source.strings[152]": "settings-outservers", "source.strings[153]": "settings-outservers-check", "source.strings[154]": "settings-outservers-check-log", "source.strings[155]": "settings-outservers-doc", "source.strings[156]": "settings-primary", "source.strings[157]": "settings-security", "source.strings[158]": "settings-security-notwritable", "source.strings[159]": "settings-security-password-changed", "source.strings[160]": "settings-security-password-not-changed", "source.strings[161]": "settings-security-remove-password", "source.strings[162]": "settings-security-set-password", "source.strings[163]": "settings-security-use-proxy", "source.strings[164]": "status", "source.strings[165]": "status-idle", "source.strings[166]": "status-pause", "source.strings[167]": "status-sending", "source.strings[168]": "stripslashes_deep", "source.strings[169]": "subject", "source.strings[170]": "subject_example", "source.strings[171]": "techsupport", "source.strings[172]": "text/html", "source.strings[173]": "text/javascript", "source.strings[174]": "text/plain", "source.strings[175]": "threadsnum", "source.strings[176]": "timeoutlen", "source.strings[177]": "title_service", "source.strings[178]": "translation", "source.strings[179]": "unavailable in service mode", "source.strings[180]": "unavalable_in_service", "source.strings[181]": "unknown", "source.strings[182]": "upload", "source.strings[183]": "uploadlist", "source.strings[184]": "uploadtemplate", "source.strings[185]": "useoutservers", "source.strings[186]": "with formating", "source.strings[187]": "withformating", "source.strings[188]": "wronglogpas", "source.strings[189]": "~\u003cimg.*?src=\\\"(.+?)\\\".*?\u003e~si", "source.strings[190]": "~background=\"(.+?)\"~si", "source.strings[191]": "Адрес ответа, email", "source.strings[192]": "Безопасность", "source.strings[193]": "Больше", "source.strings[194]": "Вернуться к редактированию", "source.strings[195]": "Внешние сервера", "source.strings[196]": "Возобновить", "source.strings[197]": "Главная", "source.strings[198]": "Длина истории отправки", "source.strings[199]": "Длительность задржки в секундах:", "source.strings[200]": "Для доступа необходима авторизация.", "source.strings[201]": "Дополнительное поле", "source.strings[202]": "Загрузить", "source.strings[203]": "Загрузка списка", "source.strings[204]": "Загрузка шаблона", "source.strings[205]": "Закрыть", "source.strings[206]": "Использовать http прокси", "source.strings[207]": "Использовать внешние серверы для отправки", "source.strings[208]": "Количество потоков:", "source.strings[209]": "Кому", "source.strings[210]": "Лимит отправок 1 в час", "source.strings[211]": "Лог проверки:", "source.strings[212]": "Логин", "source.strings[213]": "Меньше", "source.strings[214]": "Настройки", "source.strings[215]": "Неправильная captcha", "source.strings[216]": "Неправильный логин или пароль.", "source.strings[217]": "Основные", "source.strings[218]": "От кого, адрес email", "source.strings[219]": "От кого, имя", "source.strings[220]": "Отменить", "source.strings[221]": "Отправить", "source.strings[222]": "Отправка доступна", "source.strings[223]": "Отправка менее чем через минуту", "source.strings[224]": "Отправка через ", "source.strings[225]": "Отправлено на ", "source.strings[226]": "Пароль", "source.strings[227]": "Пароль успешно изменен!", "source.strings[228]": "Подробное описание работы с внешнеми серверами смотрите в \u003ca href=\"http://mailer.a-l-e-x-u-s.ru/docs/alexusMailer_v1.7.ru.pdf\"\u003e\u003cspan class=\"label label-warning\"\u003eдокументации\u003c/span\u003e\u003c/a\u003e", "source.strings[229]": "Помощь", "source.strings[230]": "Предпросмотр", "source.strings[231]": "При изменении пароля произошла ошибка, возможно файл скрипта недоступен на запись.", "source.strings[232]": "Прикрепление файла", "source.strings[233]": "Приостановить", "source.strings[234]": "Проверочный код", "source.strings[235]": "Сервис анонимной отправки почты с подменой адреса", "source.strings[236]": "Сервис анонимной отправки почты,анонимная отправка почты, анонимная отправка электронных сообшений, анонимная отправка сообшений, анонимное письмо, анонимный e mail ,отправить анонимный e mail,анонимная отправка e mail", "source.strings[237]": "Сервис анонимной отправки электронной почты с подменой адреса и прикреплением файлов йаПосылалка", "source.strings[238]": "Сохранить", "source.strings[239]": "Спонсировать разработку", "source.strings[240]": "Статус", "source.strings[241]": "Тема", "source.strings[242]": "Техническая поддержка", "source.strings[243]": "Тип письма", "source.strings[244]": "Удалить", "source.strings[245]": "Удалить пароль", "source.strings[246]": "Установить пароль", "source.strings[247]": "выращивание бамбука под кроватью", "source.strings[248]": "доп. поле", "source.strings[249]": "йаПосылалка", "source.strings[250]": "недоступно в режиме сервиса", "source.strings[251]": "обычный текст", "source.strings[252]": "пауза", "source.strings[253]": "простаиваем", "source.strings[254]": "рассылка", "source.strings[255]": "с форматированием", "source.functions[10]": "wso2exec" }, "x": 474, "id": 0, "is": [ "session_start", "set_time_limit", "isset", "isset", "die", "isset", "die", "ini_set", "ini_set", "error_reporting", "header", "define", "randomstr", "isset", "isset", "parse_url", "define", "isset", "header", "header", "tr", "md5", "header", "header", "tr", "get_magic_quotes_gpc", "is_array", "array_map", "stripslashes", "array_map", "array_map", "array_map", "array_map", "applyEnumer", "applyEnumer", "applyEnumer", "applyEnumer", "ReplaceFileTemplate", "ReplaceTemplates", "ReplaceTemplates", "ReplaceTemplates", "ReplaceTemplates", "ReplaceTemplates", "trim", "substr", "trim", "substr", "base64_encode", "trim", "isset", "trim", "preg_match_all", "preg_match_all", "array_merge", "preg_match", "preg_match", "preg_match", "md5", "str_replace", "isset", "makeAttach", "json_decode", "chunk_split", "base64_encode", "file_get_contents", "isset", "makeAttach", "json_decode", "isset", "json_encode", "base64_encode", "explode", "wso2exec", "tr", "explode", "r572exec", "tr", "explode", "c992exec", "tr", "ars2exec", "tr", "function_exists", "mb_orig_mail", "mail", "tr", "str_replace", "explode", "explode", "count", "strpos", "str_replace", "strpos", "str_replace", "strpos", "str_replace", "strpos", "str_replace", "strpos", "str_replace", "strpos", "preg_match", "str_replace", "implode", "http_build_query", "stream_context_create", "file_get_contents", "file_get_contents", "isset", "base64_encode", "json_encode", "base64_encode", "file_get_contents", "file_get_contents", "isset", "file_get_contents", "isset", "header", "header", "header", "strlen", "header", "clearstatcache", "is_writable", "file_get_contents", "str_replace", "file_put_contents", "md5", "file_get_contents", "str_replace", "str_replace", "file_put_contents", "json_encode", "clearstatcache", "is_writable", "is_writable", "function_exists", "function_exists", "isset", "json_encode", "print_r", "explode", "get_headers", "json_encode", "wso2exec", "explode", "r572exec", "explode", "c992exec", "ars2exec", "json_encode", "json_encode", "file_exists", "is_readable", "explode", "file_get_contents", "count", "preg_match_all", "file_exists", "is_readable", "str_replace", "explode", "file_get_contents", "count", "str_replace", "str_replace", "str_replace", "str_replace", "str_replace", "str_replace", "str_replace", "ReplaceFileTemplate", "preg_match_all", "date", "strtotime", "intval", "date", "strtotime", "intval", "date", "strtotime", "intval", "date", "strtotime", "intval", "date", "strtotime", "intval", "date", "strtotime", "intval", "date", "strtotime", "intval", "str_replace", "preg_match_all", "str_replace", "str_repeat", "preg_match_all", "explode", "count", "str_replace", "preg_match_all", "preg_replace", "rand", "preg_match_all", "preg_replace", "str_replace", "rand", "preg_match_all", "explode", "preg_replace", "preg_quote", "array_rand", "strpos", "explode", "count", "md5", "chunk_split", "http_build_query", "trim", "get_content", "http_build_query", "get_content", "json_decode", "randomstr", "randomstr", "substr", "substr", "substr", "substr", "urlencode", "urlencode", "base64_encode", "empty", "empty", "urlencode", "urlencode", "base64_encode", "defined", "implode", "stream_context_create", "file_get_contents", "strstr", "str_replace", "randomstr", "randomstr", "substr", "substr", "substr", "substr", "urlencode", "urlencode", "base64_encode", "empty", "empty", "base64_encode", "defined", "implode", "stream_context_create", "file_get_contents", "strstr", "str_replace", "rand", "defined", "stream_context_create", "file_get_contents", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "tr", "clearstatcache", "is_writable", "date", "eval", "base64_decode" ], "ms": { "file": { "size": 102591.0 }, "text": { "tab_count": 4031.0, "digit_ratio": 0.06, "space_count": 4748.0, "total_lines": 2038.0, "char_entropy": 6.12, "mixed_indent": true, "unique_chars": 150.0, "import_density": 14.57, "lines_over_200": 35.0, "lines_over_500": 11.0, "string_density": 0.86, "avg_line_length": 48.34, "high_byte_ratio": 0.08, "lines_over_1000": 8.0, "max_line_length": 3016.0, "non_ascii_ratio": 0.08, "empty_line_ratio": 0.02, "last_line_length": 2.0, "long_token_count": 30.0, "most_common_char": "e", "whitespace_ratio": 0.13, "most_common_ratio": 0.05, "identifier_density": 0.61, "line_length_stddev": 150.91, "encoded_string_ratio": 0.0, "normalized_import_count": 6.58, "normalized_string_count": 38.61, "repeated_char_sequences": 18.0, "suspicious_string_ratio": 0.01, "suspicious_comment_ratio": 0.1, "max_inline_whitespace_run": 3.0, "normalized_function_count": 0.24, "trailing_whitespace_lines": 67.0, "imports_to_functions_ratio": 27.0, "strings_to_functions_ratio": 158.45, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 14.19, "identifiers_to_functions_ratio": 14.18 }, "imports": { "total": 297.0, "unique_modules": 67.0, "third_party_count": 297.0, "third_party_ratio": 1.0 }, "strings": { "total": 1743.0, "url_count": 2.0, "avg_length": 31.94, "max_length": 4343.0, "path_count": 28.0, "avg_entropy": 2.63, "sql_strings": 4.0, "total_bytes": 55678.0, "entropy_stddev": 1.0, "base64_candidates": 4.0, "very_long_strings": 8.0, "high_entropy_count": 15.0, "embedded_code_candidates": 9.0 }, "comments": { "chars": 1613.0, "lines": 59.0, "total": 40.0, "todo_count": 3.0, "to_code_ratio": 0.03, "high_entropy_comments": 4.0 }, "functions": { "total": 11.0, "length_stddev": 18.01, "avg_name_length": 10.73, "no_params_count": 11.0, "avg_length_lines": 19.91, "max_length_lines": 72.0, "min_length_lines": 7.0, "density_per_100_lines": 0.54, "code_in_functions_ratio": 0.11 }, "identifiers": { "total": 1236.0, "avg_length": 8.17, "max_length": 21.0, "min_length": 1.0, "avg_entropy": 2.5, "reuse_ratio": 0.13, "unique_count": 156.0, "length_stddev": 4.18, "has_digit_ratio": 0.05, "sequential_names": 3.0, "single_char_count": 3.0, "single_char_ratio": 0.02, "high_entropy_count": 3.0, "high_entropy_ratio": 0.02, "all_lowercase_ratio": 0.83, "all_uppercase_ratio": 0.08, "numeric_suffix_count": 2.0, "double_underscore_count": 1.0, "underscore_prefix_count": 8.0 } }, "ss": [ [ 155, "RouGGa" ], [ 156, "RouGGa" ], [ 179, "pass" ], [ 180, "pass" ], [ 222, "nst" ], [ 223, "nst" ], [ 229, "$pass" ], [ 291, "nst" ], [ 292, "nst" ], [ 312, "nst" ], [ 313, "nst" ], [ 337, "\r\n\u003cnoembed\u003e\u003cxmp\u003e\u003cbody\u003e\u003c/xmp\u003e\u003c/noembed\u003e\u003cnoembed\u003e\u003cxmp\u003e\u003c/body\u003e\u003c/html\u003e\u003c/xmp\u003e\u003c/noembed\u003e\u003ctitle\u003eLocked By RouGani\u003c/title\u003e\u003ccenter\u003e\u003cbody " ], [ 338, "\r\n\u003cnoembed\u003e\u003cxmp\u003e\u003cbody\u003e\u003c/xmp\u003e\u003c/noembed\u003e\u003cnoembed\u003e\u003cxmp\u003e\u003c/body\u003e\u003c/html\u003e\u003c/xmp\u003e\u003c/noembed\u003e\u003ctitle\u003eLocked By RouGani\u003c/title\u003e\u003ccenter\u003e\u003cbody " ], [ 810, "display_errors" ], [ 811, "display_errors" ], [ 843, "display_startup_errors" ], [ 844, "display_startup_errors" ], [ 918, "Content-type: text/html; charset=utf-8;" ], [ 919, "Content-type: text/html; charset=utf-8;" ], [ 1339, "VERSION" ], [ 1340, "VERSION" ], [ 1350, "1.7" ], [ 1351, "1.7" ], [ 1369, "--" ], [ 1370, "--" ], [ 1396, "en" ], [ 1397, "en" ], [ 1422, "translation" ], [ 1423, "translation" ], [ 1457, "translation" ], [ 1458, "translation" ], [ 1490, "PROXY" ], [ 1491, "PROXY" ], [ 1536, "PROXY" ], [ 1537, "PROXY" ], [ 1556, "PROXY" ], [ 1557, "PROXY" ], [ 1578, "host" ], [ 1579, "host" ], [ 1604, "port" ], [ 1605, "port" ], [ 1640, "ru" ], [ 1641, "ru" ], [ 1656, "status-idle" ], [ 1657, "status-idle" ], [ 1671, "простаиваем" ], [ 1672, "простаиваем" ], [ 1700, "status-sending" ], [ 1701, "status-sending" ], [ 1718, "рассылка" ], [ 1719, "рассылка" ], [ 1741, "status-pause" ], [ 1742, "status-pause" ], [ 1757, "пауза" ], [ 1758, "пауза" ], [ 1774, "process-resume" ], [ 1775, "process-resume" ], [ 1792, "Возобновить" ], [ 1793, "Возобновить" ], [ 1821, "process-pause" ], [ 1822, "process-pause" ], [ 1838, "Приостановить" ], [ 1839, "Приостановить" ], [ 1871, "process-cancel" ], [ 1872, "process-cancel" ], [ 1889, "Отменить" ], [ 1890, "Отменить" ], [ 1912, "settings-primary" ], [ 1913, "settings-primary" ], [ 1932, "Основные" ], [ 1933, "Основные" ], [ 1955, "settings-outservers" ], [ 1956, "settings-outservers" ], [ 1978, "Внешние сервера" ], [ 1979, "Внешние сервера" ], [ 2014, "settings-security" ], [ 2015, "settings-security" ], [ 2035, "Безопасность" ], [ 2036, "Безопасность" ], [ 2066, "settings-history-length" ], [ 2067, "settings-history-length" ], [ 2093, "Длина истории отправки" ], [ 2094, "Длина истории отправки" ], [ 2142, "settings-outservers-doc" ], [ 2143, "settings-outservers-doc" ], [ 2169, "Подробное описание работы с внешнеми серверами смотрите в \u003ca href=\"http://mail" ], [ 2170, "Подробное описание работы с внешнеми серверами смотрите в \u003ca href=\"http://mail" ], [ 2422, "settings-outservers-check" ], [ 2423, "settings-outservers-check" ], [ 2451, "\u003cbutton class=\"btn\" onclick=\"pingoutservers()\"\u003eПроверить сервера\u003c/button\u003e (недоступные будут а" ], [ 2452, "\u003cbutton class=\"btn\" onclick=\"pingoutservers()\"\u003eПроверить сервера\u003c/button\u003e (недоступные будут а" ], [ 2643, "settings-outservers-check-log" ], [ 2644, "settings-outservers-check-log" ], [ 2676, "Лог проверки:" ], [ 2677, "Лог проверки:" ], [ 2707, "settings-security-notwritable" ], [ 2708, "settings-security-notwritable" ], [ 2740, " Отсутствует доступ на запись к скрипту! Смена пароля невозможна. \u003cb\u003eИз" ], [ 2741, " Отсутствует доступ на запись к скрипту! Смена пароля невозможна. \u003cb\u003eИз" ], [ 2951, "settings-security-password-changed" ], [ 2952, "settings-security-password-changed" ], [ 2989, "Пароль успешно изменен!" ], [ 2990, "Пароль успешно изменен!" ], [ 3039, "settings-security-password-not-changed" ], [ 3040, "settings-security-password-not-changed" ], [ 3081, "При изменении пароля произошла ошибка, возможно файл скрипта недосту" ], [ 3082, "При изменении пароля произошла ошибка, возможно файл скрипта недосту" ], [ 3240, "settings-security-set-password" ], [ 3241, "settings-security-set-password" ], [ 3274, "Установить пароль" ], [ 3275, "Установить пароль" ], [ 3314, "settings-security-remove-password" ], [ 3315, "settings-security-remove-password" ], [ 3351, "Удалить пароль" ], [ 3352, "Удалить пароль" ], [ 3385, "settings-security-use-proxy" ], [ 3386, "settings-security-use-proxy" ], [ 3416, "Использовать http прокси" ], [ 3417, "Использовать http прокси" ], [ 3465, "main" ], [ 3466, "main" ], [ 3473, "Главная" ], [ 3474, "Главная" ], [ 3494, "help" ], [ 3495, "help" ], [ 3502, "Помощь" ], [ 3503, "Помощь" ], [ 3521, "login" ], [ 3522, "login" ], [ 3530, "Логин" ], [ 3531, "Логин" ], [ 3547, "password" ], [ 3548, "password" ], [ 3559, "Пароль" ], [ 3560, "Пароль" ], [ 3578, "settings" ], [ 3579, "settings" ], [ 3590, "Настройки" ], [ 3591, "Настройки" ], [ 3615, "name" ], [ 3616, "name" ], [ 3623, "йаПосылалка" ], [ 3624, "йаПосылалка" ], [ 3652, "title_service" ], [ 3653, "title_service" ], [ 3669, "Сервис анонимной отправки почты с подменой адреса" ], [ 3670, "Сервис анонимной отправки почты с подменой адреса" ], [ 3768, "description_service" ], [ 3769, "description_service" ], [ 3791, "Сервис анонимной отправки электронной почты с подменой адреса и прик" ], [ 3792, "Сервис анонимной отправки электронной почты с подменой адреса и прик" ], [ 3979, "keywords_service" ], [ 3980, "keywords_service" ], [ 3999, "Сервис анонимной отправки почты,анонимная отправка почты, анонимная " ], [ 4000, "Сервис анонимной отправки почты,анонимная отправка почты, анонимная " ], [ 4396, "need_auth" ], [ 4397, "need_auth" ], [ 4409, "Для доступа необходима авторизация." ], [ 4410, "Для доступа необходима авторизация." ], [ 4482, "wronglogpas" ], [ 4483, "wronglogpas" ], [ 4497, "Неправильный логин или пароль." ], [ 4498, "Неправильный логин или пароль." ], [ 4560, "sendedto" ], [ 4561, "sendedto" ], [ 4572, "Отправлено на " ], [ 4573, "Отправлено на " ], [ 4605, "badcaptcha" ], [ 4606, "badcaptcha" ], [ 4619, "Неправильная captcha" ], [ 4620, "Неправильная captcha" ], [ 4658, "sendlimit" ], [ 4659, "sendlimit" ], [ 4671, "Лимит отправок 1 в час" ], [ 4672, "Лимит отправок 1 в час" ], [ 4717, "sendavailable" ], [ 4718, "sendavailable" ], [ 4734, "Отправка доступна" ], [ 4735, "Отправка доступна" ], [ 4774, "sendlessminute" ], [ 4775, "sendlessminute" ], [ 4792, "Отправка менее чем через минуту" ], [ 4793, "Отправка менее чем через минуту" ], [ 4857, "sendafter" ], [ 4858, "sendafter" ], [ 4870, "Отправка через " ], [ 4871, "Отправка через " ], [ 4905, "sendafter2" ], [ 4906, "sendafter2" ], [ 4919, " минут" ], [ 4920, " минут" ], [ 4937, "attachfile" ], [ 4938, "attachfile" ], [ 4951, "Прикрепление файла" ], [ 4952, "Прикрепление файла" ], [ 4993, "close" ], [ 4994, "close" ], [ 5002, "Закрыть" ], [ 5003, "Закрыть" ], [ 5023, "upload" ], [ 5024, "upload" ], [ 5033, "Загрузить" ], [ 5034, "Загрузить" ], [ 5058, "uploadlist" ], [ 5059, "uploadlist" ], [ 5072, "Загрузка списка" ], [ 5073, "Загрузка списка" ], [ 5108, "uploadtemplate" ], [ 5109, "uploadtemplate" ], [ 5126, "Загрузка шаблона" ], [ 5127, "Загрузка шаблона" ], [ 5164, "preview" ], [ 5165, "preview" ], [ 5175, "Предпросмотр" ], [ 5176, "Предпросмотр" ], [ 5206, "donatedevelopment" ], [ 5207, "donatedevelopment" ], [ 5227, "Спонсировать разработку" ], [ 5228, "Спонсировать разработку" ], [ 5279, "techsupport" ], [ 5280, "techsupport" ], [ 5294, "Техническая поддержка" ], [ 5295, "Техническая поддержка" ], [ 5342, "settings" ], [ 5343, "settings" ], [ 5354, "Настройки" ], [ 5355, "Настройки" ], [ 5379, "threadsnum" ], [ 5380, "threadsnum" ], [ 5393, "Количество потоков:" ], [ 5394, "Количество потоков:" ], [ 5436, "timeoutlen" ], [ 5437, "timeoutlen" ], [ 5450, "Длительность задржки в секундах:" ], [ 5451, "Длительность задржки в секундах:" ], [ 5517, "useoutservers" ], [ 5518, "useoutservers" ], [ 5534, "Использовать внешние серверы для отправки" ], [ 5535, "Использовать внешние серверы для отправки" ], [ 5619, "unavalable_in_service" ], [ 5620, "unavalable_in_service" ], [ 5644, "недоступно в режиме сервиса" ], [ 5645, "недоступно в режиме сервиса" ], [ 5702, "less" ], [ 5703, "less" ], [ 5710, "Меньше" ], [ 5711, "Меньше" ], [ 5729, "more" ], [ 5730, "more" ], [ 5737, "Больше" ], [ 5738, "Больше" ], [ 5756, "delete" ], [ 5757, "delete" ], [ 5766, "Удалить" ], [ 5767, "Удалить" ], [ 5787, "status" ] ], "sz": 102591, "ts": [ { "a": "T1105", "c": 0.800000011920929, "d": "Creates or overwrites a local file", "e": [ "file_put_contents" ], "i": "micro-behaviors/fs/write/file/direct::file-put-contents", "l": 3, "m": "C0052" }, { "c": 0.8399999737739563, "d": "CSV attachment filename response", "e": [ "Content-Disposition: attachment; filename" ], "i": "micro-behaviors/data/format/csv/http-telemetry::csv-attachment-filename", "l": 1 }, { "a": "T1071.001", "c": 0.8999999761581421, "d": "Base64 result chunking", "e": [ "chunk_split(base64" ], "i": "objectives/command-and-control/beacon/network/json::result-base64-chunking", "l": 3, "m": "B0030" }, { "d": "hide keyword", "e": [ "hide" ], "i": "micro-behaviors/data/text/keywords/lexicon::hide", "l": 1 }, { "a": "T1554", "c": 0.8500000238418579, "d": "Extracts fixed-size payload from source via substr", "e": [ "substr($fromname,0,100" ], "i": "objectives/impact/infect/script::payload-body-extraction", "l": 1 }, { "c": 0.6000000238418579, "d": "JSON encoding for data output", "e": [ "json_encode" ], "i": "micro-behaviors/data/serialize/object::json-encode", "l": 2 }, { "c": 0.6000000238418579, "d": "Generates HTML tags", "e": [ "\u003cbody", "\u003chtml" ], "i": "micro-behaviors/data/format/html::html-generator-tags", "l": 3 }, { "d": "overflow keyword", "e": [ "overflow" ], "i": "micro-behaviors/data/text/keywords/lexicon::overflow", "l": 1 }, { "c": 0.8399999737739563, "d": "Regex component marker", "e": [ "uploadlist", "upload", "uploadtemplate", "Upload list", "window.parent.uploadFinishedHandler(document.body.textContent||document.body.innerText)", "window.parent.upload_finished(document.body.textContent||document.body.innerText)", "Upload" ], "i": "micro-behaviors/data/text/llm/action::llm-send-action--rx-11", "l": 1 }, { "c": 0.8500000238418579, "d": "MIME attachment disposition", "e": [ "Content-Disposition: attachment" ], "i": "micro-behaviors/communications/email/mime::mime-content-disposition", "l": 1 }, { "c": 0.8399999737739563, "d": "Regex component marker", "e": [ "settings-security-password-changed", "\r\n\u003cnoembed\u003e\u003cxmp\u003e\u003cbody\u003e\u003c/xmp\u003e\u003c/noembed\u003e\u003cnoembed\u003e\u003cxmp\u003e\u003c/body\u003e\u003c/html\u003e\u003c/xmp\u003e\u003c/noembed\u003e\u003ctitle\u003eLocked By RouGani\u003c/title\u003e\u003ccenter\u003e\u003cbody ", "settings-security-set-password", "settings-security-password-not-changed", "password", "settings-security-remove-password", "Script file is not writable! Password change imposible. \u003cb\u003eChange file rights to 666\u003c/b\u003e for password change." ], "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-4--inline-11750", "l": 1 }, { "c": 0.8999999761581421, "d": "Very long line", "e": [ "text.max_line_length = 3016.00" ], "i": "metadata/file/text/metrics::single-long-line", "l": 1 }, { "c": 0.6000000238418579, "d": "JSON decoding for data input", "e": [ "json_decode" ], "i": "micro-behaviors/data/serialize/object::json-decode", "l": 2 }, { "a": "T1071.001", "c": 0.8199999928474426, "d": "Frontend asset loaded from cdnjs", "e": [ "http://cdnjs.cloudflare.com/" ], "i": "micro-behaviors/communications/http/client/cdn::cdnjs-asset", "l": 3, "m": "C0002" }, { "a": "T1059", "c": 0.8500000238418579, "d": "HTTP GET parameter access ($_GET)", "e": [ "$_GET" ], "i": "micro-behaviors/communications/http/request/params::get-dup", "l": 3 }, { "a": "T1505.003", "c": 0.4000000059604645, "d": "PHP $_POST parameter access", "e": [ "$_POST[" ], "i": "objectives/command-and-control/backdoor/webshell/request::php-post", "l": 1, "m": "B0030" }, { "a": "T1505.003", "c": 0.8999999761581421, "d": "PHP source imports base64_decode", "e": [ "[ReplaceFileTemplate, ReplaceTemplates, applyEnumer, array_map, array_merge, array_rand, ars2exec, base64_decode, base64_encode," ], "i": "objectives/command-and-control/backdoor/webshell/stager::source-import-base64-decode", "l": 1 }, { "a": "T1505.003", "c": 0.949999988079071, "d": "Regex component marker", "e": [ "eval(base64_decode(" ], "i": "objectives/command-and-control/backdoor/webshell/decoder::eval-decoder-chain--rx-1", "l": 1, "m": "B0030" }, { "c": 0.8399999737739563, "d": "password/token/api_key field keyword", "e": [ "password" ], "i": "micro-behaviors/data/text/keywords/credential::credential-field", "l": 1 }, { "a": "T1027", "c": 0.699999988079071, "d": "base64_encode function call for encoding payloads", "e": [ "base64_encode" ], "i": "objectives/anti-static/obfuscation/encoding/xor::base64-encode-call", "l": 4, "m": "B0032" }, { "c": 0.800000011920929, "d": "HTTP Cookie access ($_COOKIE)", "e": [ "$_COOKIE" ], "i": "micro-behaviors/communications/http/request/params::cookie", "l": 3 }, { "c": 0.699999988079071, "d": "PHP error suppression operator usage", "e": [ "@session_start()", "@set_time_limit(0)", "@file_get_contents($url, false, $context)", "@file_get_contents($requrl, false, $context)" ], "i": "micro-behaviors/os/stdio::error-suppress-prefix", "l": 3 }, { "a": "T1505.003", "c": 1.0, "d": "Inequality check in WordPress user list", "e": [ "!=" ], "i": "objectives/command-and-control/backdoor/webshell/hide::wp-user-hiding-not-trait", "l": 1, "m": "B0030" }, { "c": 0.75, "d": "Generic $_SERVER superglobal access", "e": [ "$_SERVER" ], "i": "micro-behaviors/communications/http/request/params::server-dup", "l": 3 }, { "c": 0.8999999761581421, "d": "HTTP protocol prefix", "e": [ "http://" ], "i": "micro-behaviors/communications/http/protocol::http-prefix", "l": 2 }, { "c": 0.949999988079071, "d": "Disables error reporting (error_reporting(0))", "e": [ "error_reporting(0)" ], "i": "micro-behaviors/os/stdio::error-reporting-off", "l": 3 }, { "a": "T1059", "c": 0.8500000238418579, "d": "HTTP REQUEST parameter access ($_REQUEST)", "e": [ "$_REQUEST" ], "i": "micro-behaviors/communications/http/request/params::request-dup", "l": 3 }, { "a": "T1071.001", "c": 0.699999988079071, "d": "application/x-www-form-urlencoded content type", "e": [ "application/x-www-form-urlencoded" ], "i": "micro-behaviors/communications/http/post::url-encoded-content-type", "l": 1, "m": "C0002" }, { "a": "T1071.001", "c": 0.6000000238418579, "d": "enctype attribute", "e": [ "enctype=" ], "i": "micro-behaviors/communications/http/post::enctype-attr", "l": 3, "m": "C0002" }, { "c": 1.0, "d": "PHP mail() function call", "e": [ "mail" ], "i": "micro-behaviors/process/create/exec::php-mail", "l": 3 }, { "c": 0.8999999761581421, "d": "HTTP/1.1 protocol version", "e": [ "HTTP/1.1 404 Not Found" ], "i": "micro-behaviors/communications/http/protocol::http-1-1-header", "l": 2 }, { "c": 0.8799999952316284, "d": "MIME multipart message marker", "e": [ "multipart/mixed" ], "i": "micro-behaviors/communications/email/mime::mime-multipart-boundary", "l": 3 }, { "a": "T1071", "c": 0.6000000238418579, "d": "URL with .php endpoint", "e": [ "http://serv4.ru/sw.php" ], "i": "objectives/command-and-control/infrastructure/domain/tld::php-endpoint-url", "l": 1 }, { "a": "T1505.003", "c": 0.9399999976158142, "d": "Regex component marker", "e": [ "json_decode" ], "i": "objectives/command-and-control/backdoor/webshell/request::raw-json-post-cmd-field--rx-8", "l": 1, "m": "B0030" }, { "a": "T1071.001", "d": "HTTP/1.x version string", "e": [ "HTTP/1." ], "i": "micro-behaviors/communications/http/request/client::http-version", "l": 2, "m": "C0002" }, { "c": 0.699999988079071, "d": "base64 encoding keyword", "e": [ "base64" ], "i": "micro-behaviors/data/text/encoded::base64-token", "l": 3 }, { "c": 0.8600000143051147, "d": "Regex component marker", "e": [ "method=" ], "i": "objectives/command-and-control/backdoor/webshell/ui::self-named-get-form--rx-3", "l": 1, "m": "B0030" }, { "a": "T1584", "c": 0.8999999761581421, "d": "Regex component marker", "e": [ "strstr" ], "i": "objectives/command-and-control/dropper/delivery/seo-spam::php-seo-cloaking--rx-3", "l": 1 }, { "a": "T1546", "c": 1.0, "d": "Writes data to a file via functions", "e": [ "file_put_contents(" ], "i": "micro-behaviors/fs/file/write/direct::php-file-write-func", "l": 2 }, { "a": "T1027", "c": 0.9200000166893005, "d": "Regex component marker", "e": [ "bytes" ], "i": "objectives/anti-static/obfuscation/payload/config::api-named-byte-array-const--rx-6", "l": 1, "m": "B0032" }, { "a": "T1505.003", "c": 0.9399999976158142, "d": "Regex component marker", "e": [ "file_get_contents" ], "i": "objectives/command-and-control/backdoor/webshell/request::raw-json-post-cmd-field--rx-7", "l": 1, "m": "B0030" }, { "a": "T1505.003", "d": "PHP open tag", "e": [ "\u003c?php" ], "i": "objectives/command-and-control/backdoor/webshell/request::php-tag", "l": 1, "m": "B0030" }, { "a": "T1505.003", "c": 0.8199999928474426, "d": "Content-Disposition download response", "e": [ "Content-Disposition: attachment; filename" ], "i": "objectives/command-and-control/backdoor/webshell/stager::content-disposition-download", "l": 1 }, { "c": 0.8500000238418579, "d": "Removes PHP script execution time limit", "e": [ "@set_time_limit(0)" ], "i": "objectives/command-and-control/backdoor/webshell/session::unlimited-runtime-call", "l": 4 }, { "a": "T1505.003", "c": 0.8799999952316284, "d": "Regex component marker", "e": [ "eval" ], "i": "objectives/command-and-control/backdoor/webshell/exec::dangerous-php-function-cluster--rx-16", "l": 1, "m": "B0030" }, { "a": "T1059.006", "c": 0.75, "d": "PHP eval() token present", "e": [ "eval" ], "i": "micro-behaviors/process/interpreter/eval::eval-symbol", "l": 4, "m": "E1059" }, { "c": 0.8999999761581421, "d": "File has 30 or more lines", "e": [ "text.total_lines = 2038.00" ], "i": "metadata/file/text/metrics::file-has-30-plus-lines", "l": 1 }, { "a": "T1059", "c": 0.8500000238418579, "d": "HTTP POST parameter access ($_POST)", "e": [ "$_POST" ], "i": "micro-behaviors/communications/http/request/params::post-dup", "l": 3 }, { "a": "T1105", "c": 0.8500000238418579, "d": "File upload access ($_FILES)", "e": [ "$_FILES" ], "i": "micro-behaviors/communications/http/request/params::files", "l": 3 }, { "d": "password keyword", "e": [ "password" ], "i": "micro-behaviors/data/text/keywords/lexicon::password", "l": 1 }, { "a": "T1027.010", "d": "Hardcoded standard base64 alphabet", "e": [ "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" ], "i": "micro-behaviors/data/encode/base64::alphabet-standard", "l": 2, "m": "B0032.001" }, { "c": 0.699999988079071, "d": "MD5 hash computation", "e": [ "md5" ], "i": "micro-behaviors/crypto/hash/digest::md5-php", "l": 3, "m": "C0029" }, { "a": "T1027", "c": 0.9200000166893005, "d": "Regex component marker", "e": [ "HOST" ], "i": "objectives/anti-static/obfuscation/payload/config::url-component-concat--rx-12", "l": 1, "m": "B0032" }, { "a": "T1071.001", "c": 0.75, "d": "PHP stream context creation", "e": [ "stream_context_create" ], "i": "micro-behaviors/communications/http/xmlrpc::php-stream-context", "l": 3, "m": "C0002" }, { "c": 0.75, "d": "File read via file_get_contents", "e": [ "file_get_contents" ], "i": "micro-behaviors/fs/read/file::file-get-contents", "l": 2, "m": "C0051" }, { "c": 0.8500000238418579, "d": "MIME octet-stream content type", "e": [ "application/octet-stream" ], "i": "micro-behaviors/communications/email/mime::mime-octet-stream", "l": 1 }, { "a": "T1505.003", "c": 0.75, "d": "HTTP 401 unauthorized response", "e": [ "401 Unauthorized" ], "i": "objectives/command-and-control/backdoor/webshell/deny::http-401-unauthorized", "l": 1, "m": "B0030" }, { "d": "Content-Type header string", "e": [ "Content-Type:" ], "i": "micro-behaviors/communications/http/request/client::content-type-header", "l": 1 }, { "c": 0.8600000143051147, "d": "Regex component marker", "e": [ "PHP_SELF" ], "i": "objectives/command-and-control/backdoor/webshell/ui::self-named-get-form--rx-2", "l": 1, "m": "B0030" }, { "c": 0.8999999761581421, "d": "HTTP/1.0 protocol version", "e": [ "HTTP/1.0 401 Unauthorized" ], "i": "micro-behaviors/communications/http/protocol::http-1-0-header", "l": 2 }, { "a": "T1505.003", "c": 0.8500000238418579, "d": "PHP request superglobal access", "e": [ "$_POST" ], "i": "objectives/command-and-control/backdoor/webshell/upload::php-request-variadic-function-call", "l": 3, "m": "B0030" }, { "a": "T1059", "c": 0.800000011920929, "d": "Self-reference via __FILE__", "e": [ "__FILE__" ], "i": "micro-behaviors/fs/read/self::self-file-reference", "l": 3 }, { "c": 0.75, "d": "HTTP protocol version strings", "e": [ "HTTP/1.0" ], "i": "micro-behaviors/communications/http/request/client::http-versions", "l": 1 }, { "c": 0.8399999737739563, "d": "Regex component marker", "e": [ "password", "\r\n\u003cnoembed\u003e\u003cxmp\u003e\u003cbody\u003e\u003c/xmp\u003e\u003c/noembed\u003e\u003cnoembed\u003e\u003cxmp\u003e\u003c/body\u003e\u003c/html\u003e\u003c/xmp\u003e\u003c/noembed\u003e\u003ctitle\u003eLocked By RouGani\u003c/title\u003e\u003ccenter\u003e\u003cbody ", "settings-security-password-changed", "settings-security-password-not-changed", "settings-security-set-password", "Script file is not writable! Password change imposible. \u003cb\u003eChange file rights to 666\u003c/b\u003e for password change.", "settings-security-remove-password" ], "i": "micro-behaviors/data/text/llm/action::llm-send-action--rx-6", "l": 1 }, { "c": 0.8600000143051147, "d": "Regex component marker", "e": [ "$_SERVER[" ], "i": "objectives/command-and-control/backdoor/webshell/ui::self-named-get-form--rx-4", "l": 1, "m": "B0030" }, { "c": 0.7599999904632568, "d": "Regex component marker", "e": [ "please" ], "i": "micro-behaviors/data/text/llm/action::llm-path-navigation-action--rx-27", "l": 1 }, { "a": "T1505.003", "c": 0.8999999761581421, "d": "PHP source imports file_put_contents", "e": [ "[ReplaceFileTemplate, ReplaceTemplates, applyEnumer, array_map, array_merge, array_rand, ars2exec, base64_decode, base64_encode," ], "i": "objectives/command-and-control/backdoor/webshell/stager::source-import-file-put-contents", "l": 1 }, { "a": "T1565.001", "c": 0.8500000238418579, "d": "Regex component marker", "e": [ "download" ], "i": "objectives/evasion/hosts-file/block-security::escan-security-domain--rx-1", "l": 1, "m": "F0004" }, { "c": 0.44999998807907104, "d": "AUTH authentication label", "e": [ "AUTH" ], "i": "micro-behaviors/data/text/keywords/credential::auth-upper", "l": 1 }, { "a": "T1505.003", "c": 0.8600000143051147, "d": "Very long embedded string", "e": [ "strings.max_length = 4343.00" ], "i": "objectives/command-and-control/backdoor/webshell/stager::very-long-string", "l": 1 }, { "c": 0.75, "d": "Session variable access ($_SESSION)", "e": [ "$_SESSION" ], "i": "micro-behaviors/communications/http/request/params::session", "l": 3 }, { "a": "T1071.001", "c": 0.699999988079071, "d": "HTTP POST method", "e": [ "'POST'" ], "i": "micro-behaviors/communications/http/post::post", "l": 1, "m": "C0002" }, { "c": 0.20000000298023224, "d": "command keyword", "e": [ "command" ], "i": "micro-behaviors/data/text/keywords/lexicon::command-dup", "l": 1 }, { "a": "T1027", "c": 0.699999988079071, "d": "Low identifier reuse ratio", "e": [ "identifiers.reuse_ratio = 0.13" ], "i": "objectives/anti-static/obfuscation/code-metrics/identifiers::low-identifier-reuse", "l": 2, "m": "B0032" }, { "a": "T1027", "c": 0.8500000238418579, "d": "Multiple long lines (\u003e1000 chars)", "e": [ "text.lines_over_1000 = 8.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::very-long-lines", "l": 2, "m": "B0032" }, { "a": "T1027", "c": 0.800000011920929, "d": "High overall text entropy (encoded", "e": [ "text.char_entropy = 6.12" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::high-text-entropy", "l": 2, "m": "B0032" }, { "c": 0.6000000238418579, "d": "Very long base64 strings present", "e": [ "PD8KJHNpdGUgPSAid3d3Lmdvb2dsZS5jb20iOwppZighZXJlZygkc2l0ZSwgJF9TRVJWRVJbJ1NFUlZFUl9OQU1FJ10pKQp7CiR0byA9ICJyb3VnYW5pNDVAZ21haWwu" ], "i": "objectives/anti-static/obfuscation/string/base64::long-base64-in-strings", "l": 3 }, { "a": "T1027", "c": 0.9200000166893005, "d": "Regex component marker", "e": [ "AUTH" ], "i": "objectives/anti-static/obfuscation/payload/config::api-named-byte-array-const--rx-8", "l": 1, "m": "B0032" }, { "c": 0.75, "d": "Inline password token in lure", "e": [ "password = \"RouGGa\"" ], "i": "objectives/lateral-movement/social-engineering/lures::inline-password-token", "l": 1 }, { "c": 0.699999988079071, "d": "Remove execution time limit", "e": [ "set_time_limit" ], "i": "micro-behaviors/process/control/signal::set-time-limit", "l": 3 }, { "c": 0.6000000238418579, "d": "Dense Cyrillic character strings in non-Cyrillic context", "e": [ "Внешние", "Приостановить", "Возобновить", "простаиваем", "пауза", "Основные", "рассылка", "Отменить" ], "i": "objectives/anti-static/obfuscation/string/junking::dense-cyrillic-literals", "l": 3 }, { "c": 0.6000000238418579, "d": "Common C2 status/task query key", "e": [ "\u0026cmd=p" ], "i": "micro-behaviors/data/text/keywords/malware::c2-polling-param-prefix-b", "l": 1 }, { "c": 0.699999988079071, "d": "AJAX request handler pattern", "e": [ "$_POST['tema']", "$_POST['fromname']", "$_POST['to']", "$_POST['additional']", "$_POST['PROXY']", "$_POST['enumer']", "$_POST['text']", "$_POST['replymail']", "$_POST['type']", "$_POST['pass']", "$_POST['frommail']", "$_POST['files']" ], "i": "objectives/command-and-control/backdoor/webshell/ui::ajax-handler", "l": 4, "m": "B0030" }, { "a": "T1071.001", "d": "Port 8080 (HTTP alt)", "e": [ ":8080" ], "i": "objectives/command-and-control/infrastructure/ip::port-8080", "l": 3, "m": "C0002" }, { "a": "T1071.001", "c": 0.6000000238418579, "d": "multipart/form-data content type", "e": [ "multipart/form-data" ], "i": "micro-behaviors/communications/http/post::multipart-form", "l": 1, "m": "C0002" }, { "a": "T1505.003", "c": 0.949999988079071, "d": "PHP eval of remotely-fetched code", "e": [ "eval", "file_get_contents" ], "i": "objectives/execution/interpreter/eval/remote::remote-code-eval", "l": 4, "m": "E1059" }, { "a": "T1505.003", "c": 0.9700000286102295, "d": "PHP decoder eval webshell", "e": [ "eval(base64_decode(", "$_GET", "$_POST" ], "i": "objectives/command-and-control/backdoor/webshell/decoder::php-decoder-eval-webshell", "l": 5, "m": "B0030" }, { "a": "T1566.002", "c": 0.8500000238418579, "d": "PHP script writing POST data to local file", "e": [ "$_POST" ], "i": "objectives/credential-access/phishing/tactics::php-credential-exfiltration", "l": 4, "m": "B0030" }, { "c": 1.0, "d": "php code embedded in string", "e": [ "Detected php at offset 0x0" ], "i": "metadata/lang/embedded::php", "l": 2 }, { "c": 0.800000011920929, "d": "Short sidecar-sized source", "e": [ "text.total_lines = 1.00", "text.total_lines = 2.00" ], "i": "metadata/package/config::short-sidecar-file", "l": 1 }, { "a": "T1056", "c": 0.8999999761581421, "d": "Regex component marker", "e": [ "document" ], "i": "objectives/credential-access/email/webmail/hidden-autofill::username-password-read--rx-5", "l": 1 }, { "a": "T1105", "c": 0.8500000238418579, "d": "Regex component marker", "e": [ "body" ], "i": "objectives/command-and-control/dropper/delivery/fetch-eval::new-function-variable-body--rx-7", "l": 1 }, { "c": 0.800000011920929, "d": "Very short file (under 12 lines)", "e": [ "text.total_lines = 2.00", "text.total_lines = 1.00" ], "i": "metadata/file/text/metrics::file-under-12-lines", "l": 1 }, { "c": 0.800000011920929, "d": "Small sidecar-sized file", "e": [ "identifiers.total = 2.00" ], "i": "metadata/package/config::small-sidecar-file", "l": 1 }, { "a": "T1528", "c": 0.8600000143051147, "d": "Regex component marker", "e": [ "html" ], "i": "objectives/credential-access/cloud/token::oauth-redirect-with-target-email--rx-10", "l": 1 }, { "c": 0.8999999761581421, "d": "Tiny JavaScript sidecar loader", "e": [ "text.total_lines = 1.00", "text.total_lines = 2.00" ], "i": "objectives/supply-chain/hidden-payload/encoding::tiny-loader-lines", "l": 1 }, { "c": 0.699999988079071, "d": "Small file under 5KB", "e": [ "6363d2b9fe57a41dd2e0b93c34e28a59##plain@0x84bb", "6363d2b9fe57a41dd2e0b93c34e28a59##plain@0x8803", "6363d2b9fe57a41dd2e0b93c34e28a59##plain@0x84ba", "6363d2b9fe57a41dd2e0b93c34e28a59##plain@0x824a", "6363d2b9fe57a41dd2e0b93c34e28a59##plain@0x8249", "6363d2b9fe57a41dd2e0b93c34e28a59##plain@0x8802", "6363d2b9fe57a41dd2e0b93c34e28a59##plain@0x86e9", "6363d2b9fe57a41dd2e0b93c34e28a59##plain@0x86e8" ], "i": "objectives/supply-chain/metadata-anomaly/package/npm::small-file-5k", "l": 1 }, { "c": 1.0, "d": "javascript code embedded in string", "e": [ "Detected javascript at offset 0x84ba", "Detected javascript at offset 0x824a", "Detected javascript at offset 0x8249", "Detected javascript at offset 0x86e8", "Detected javascript at offset 0x8803", "Detected javascript at offset 0x8802", "Detected javascript at offset 0x84bb", "Detected javascript at offset 0x86e9" ], "i": "metadata/lang/embedded::javascript", "l": 2 }, { "c": 0.949999988079071, "d": "File is a one-liner", "e": [ "text.total_lines = 1.00" ], "i": "metadata/file/text/metrics::file-one-liner", "l": 1 }, { "c": 0.699999988079071, "d": "DOM write API innerHTML or appendChild", "e": [ "innerHTML" ], "i": "objectives/impact/ui/delivery::dynamic-ad-injection-dom-api-a", "l": 1 }, { "c": 0.8999999761581421, "d": "Encoded payload detected: base64", "e": [ "\u003c? $site = \"www.google.com\"; if(!ereg($s \u003cbase64\u003e" ], "i": "metadata/encoded-payload/base64", "l": 3 }, { "c": 0.8999999761581421, "d": "Generic PHP webshell which uses any eval/exec function in the same line with user input", "e": [ "eval(base64_decode($_POST" ], "i": "third_party/SigBase/WEBSHELL/PHP/Generic/Eval", "l": 5 }, { "c": 0.8999999761581421, "d": "PHP webshell which directly eval()s obfuscated string", "e": [ "\u003c?php", "eval(base64_decode(", "\u003c?" ], "i": "third_party/SigBase/WEBSHELL/PHP/Gzinflated", "l": 5 }, { "c": 0.8999999761581421, "d": "typical webshell strings, suspicious", "e": [ "eval(\"?\u003e\"", "\u003c?", "\u003c?php" ], "i": "third_party/SigBase/WEBSHELL/PHP/Strings/SUSP", "l": 5 }, { "c": 0.8999999761581421, "e": [ "ZFUlsnUkVRVUVTVF9VUkk" ], "i": "third_party/elastic/Linux_Webshell_Generic/linux/webshell_generic", "l": 5 } ], "sha": "bc2f1af10110e3077cf9641ab01f7d857701c823bf7e19d83215d19f77898ca9", "path": "/data/samples/bad/datasets/kaker-scripts/php/6363d2b9fe57a41dd2e0b93c34e28a59", "type": "php" } ], "tv": "bef72" } }