I would like to add some details about a username in case someone didn't understand its meaning. The github username spells like 'nullers'. 'Nulling' is a slang word meaning removing license protection from commercial web applications like CMS (and usually publishing them for everyone to use like some type of modern Robin Hood) and 'nullers' are the people who do it.
The code has a payload (probably a web shell) encrypted with a password that should be sent via a cookie or a variable in the POST request body. The encryption has some serious weaknesses.
The code has a payload (probably a web shell) encrypted with a password that should be sent via a cookie or a variable in the POST request body. The encryption has some serious weaknesses.
The @masrermike's comment https://news.ycombinator.com/item?id=13281312 has a link to the tool that could be used to encrypt the payload.
In case if anyone is interested I can post a formatted code (the payload is still encrypted): http://pastebin.com/sVLsGTub